OverviewEXFO develops smarter network test, monitoring, and analytics solutions for the world’s leading telecommunications service providers, network equipment manufacturers, and web-scale companies—and we love what we do! With nearly 1,900 employees in more than 25 countries, EXFO is the world’s number one provider of fiber optic test solutions and has the largest active assurance deployment. Our broad portfolio of intelligent hardware and software solutions enables our customers’ network transformations related to fiber, 5G, virtualization, and big data analytics.

We are always looking for top talent to help us lead the way in a thriving industry with unlimited opportunities. Your RoleWith more than 20% of our revenue invested in R&D;, EXFO is recognized for its team of experts who create numerous new products to meet the current and future needs of the world’s largest telecommunications network operators. By joining EXFO as an Application Security Specialist, you will work with sophisticated technologies in a dynamic and innovative setting.

The ideal candidate has experience in both application development and information security. The selected individual will work closely with IT security specialists to exchange ideas, collaborate on best practices, and coordinate approaches to address common vulnerabilities and more. Evolve, drive, and execute the strategy to ensure application security at EXFO.





Perform risk and vulnerability assessments at the system and application levels. Define effective risk mitigation measures while contributing to security awareness programs. Develop and implement application security controls.

Provide security expertise, including during product design phases. Deliver timely and detailed reports, including evidence of findings, risk analysis, recommendations, and remediation guidance.

Technical Skills

General understanding of security and data protection regulations and best practices, and their impact on application design. Knowledge of application security testing methods and tools. Knowledge of security controls and measures in a cloud-native environment (K8s, Docker, AWS, Azure).

Knowledge of cryptography (PKI, digital signatures, SSL/TLS). Actively engaged with the broader security community, keeping up with the latest threats, trends, and technologies. Software development experience considered an asset.

Infrastructure security knowledge considered an asset. Security certifications such as (ISC)² CSSLP or CEH considered an asset. Knowledge of telecommunications technologies/industry considered an asset.

Proven leadership experience in security roles. Ability to deliver training (e.secure coding, security best practices, or compliance with security requirements). 8+ years of experience in software security. Bilingual (French and English).

Bachelor’s degree in Computer Science or a related field.

📌 Application Security Specialist. (Winnipeg)
🏢 EXFO
📍 Winnipeg