Apply penetration testing and secure code review expertise as an Application Security Engineer at TMX, supporting products across global capital markets.This Application Security Engineer implements TMX’s Application Security Programme through secure architecture, vulnerability identification, and security assessments. The work partners with development, product, and DevOps teams while addressing web application, cloud, and microservices security. You will communicate findings clearly and support secure coding practices.Key Responsibilities:
Lead application security testing across the product suitePerform code reviews for flaws and attack vectorsIdentify vulnerabilities through penetration testing and threat modelingGuide vulnerability tracking, remediation,
and risk managementAutomate security tests within CI/CD pipelinesRequirements:
Three-plus years of application security engineering experience ideallyHands-on penetration testing and security code review experienceKnowledge of OWASP Top 10 and CWE Top 25Proficiency with C++, C#, Python, or JavaScriptExpertise using Burp Suite, SQLmap, Wireshark, SAST, and DAST toolsBring application security, penetration testing, and secure coding expertise to strengthen TMX products and development practices.