Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇨🇦 Canada – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

💻 Application Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Newfold Digital

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2021

💼 Consulting

📣 Marketing

📦 Logistics

💰 Venture Round on 2021-01

Consulting • Marketing • Logistics

Newfold Digital is a leading web presence solutions provider serving millions of small-to-medium businesses globally. Through its portfolio of brands, including Bluehost, CrazyDomains, HostGator, Network Solutions, Register. com, Web. com, and many others, Newfold Digital helps customers of all sizes build a digital presence that delivers results and adds value to businesses. With extensive product offerings such as domains, website builders, hosting, security, online marketing, professional website design, and SEO services, along with personalized support, Newfold Digital collaborates with its customers to meet their online presence needs.

📋 Description

• Operate and maintain AppSec scanning tools, including SAST, SCA, secrets scanning, and container scanning, across the SDLC • Triage findings, validate true positives, and prioritize remediation with engineering teams • Track vulnerabilities through closure and monitor SLA compliance • Support onboarding of new repositories and services into security tooling • Contribute to internal documentation, runbooks, and process improvements • Assist with basic scripting and automation tasks under guidance from senior team members

🎯 Requirements

• 2–4 years in application security, security engineering, or a related software/QA engineering role • Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices • Basic scripting ability; Python preferred • Comfortable communicating findings clearly to developers • Strong attention to detail and ability to manage a queue of findings across multiple tools • Exposure to Defect Dojo, Dependency-Track, Truffle Hog, Trivy, and/or Semgrep is nice to have • Familiarity with CI/CD pipelines and how security scans plug into them is nice to have • Interest in growing into tool integration, automation, or custom rule-writing over time is nice to have

🏖️ Benefits

• Work-life balance • Diversity and inclusion programs • Learning and development opportunities • 20+ affinity groups for networking and connection • Competitive HMO benefits – 175k MBL with one free dependent upon one year of service • Punctuality Bonus • Generous Vacation policy • Mentorship and career growth opportunities