Senior Security Software Engineer – Developer

🔥 2 minutes ago

🌐 Canada, United States – Remote

🇨🇦 Canada – Remote 🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Vecima Networks Inc.

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1988

📡 Telecommunications

🔧 Hardware

📱 Media

Telecommunications • Hardware • Media

Vecima Networks Inc. is a global provider of scalable software, services, and integrated technology platforms for broadband access, content delivery, and fleet telematics. The company designs and supplies hardware (remote PHY/RPD nodes, OLTs, access platforms) and cloud-native software (Entra access/cloud management, MediaScale streaming, CDN and caching) for cable and fiber network operators, enabling multi-gigabit access, video delivery, and operational automation. Vecima also offers professional services, support, and deployment services to help service providers deploy and manage converged access and content distribution solutions.

📋 Description

• Identify and reduce security risk throughout the product lifecycle • Lead threat modelling for products, features, and architecture changes • Identify assets, trust boundaries, attack surfaces, abuse cases, attack paths, and security controls • Review product architectures and security-sensitive designs • Translate security risks into engineering requirements, implementation guidance, verification plans, and actionable development work • Provide practical security leadership to software teams • Coach developers and architects in secure design, secure coding, threat modelling, and security testing • Improve secure product development through risk-based activities, release criteria, reusable guidance, templates, security reviews, and automated CI/CD checks • Help teams apply defense in depth, least privilege, secure-by-default behavior, and appropriate isolation boundaries • Support SBOM generation, validation, completeness, release integration, and disclosure using CycloneDX and related standards • Perform CVE monitoring and triage • Support vulnerability assessment, remediation, disclosure, customer communication, and PSIRT practices • Lead the Product Security contribution to the organization’s ISO/IEC 27001 ISMS • Lead customer engagement involving security reviews, questionnaires, contractual requirements, and audits • Work with Software Architects, Developers, Product Management, Compliance, and service provider customers • Design, build, test, release, and maintain well-secured products

🎯 Requirements

• 5+ years of professional software engineering, security engineering, or combined experience • Significant hands-on experience securing production software • Experience with Linux, source control, code review, build systems, CI/CD, automated testing, and modern software development practices • Ability to understand production software at source-code level and work with developers on security-sensitive changes • Programming ability in at least one relevant language, such as C, C++, Python, Go, Java, JavaScript/TypeScript, or Rust • Experience applying Product Security or Application Security practices within a software development organization • Strong understanding of secure software design, common vulnerability classes, attack techniques, and defensive controls • Practical threat modelling experience using STRIDE, attack trees, abuse cases, or an equivalent risk-based approach • Experience reviewing software or system architectures from a security perspective and translating risks into engineering requirements • Experience investigating vulnerabilities and determining technical impact, exploitability, affected components, and mitigations • Experience with SBOM and software composition analysis tools and familiarity with CycloneDX • Working knowledge of software dependencies, vulnerability databases, software supply-chain risk, and vulnerability remediation • Understanding of how software is built, packaged, released, deployed, and maintained in production • Ability to explain complex technical security risks to developers, architects, product leaders, auditors, and customers • Sound engineering judgement balancing risk reduction with product constraints, delivery requirements, reliability, performance, and maintainability • Ability to lead through technical credibility, collaboration, coaching, and influence • Comfortable working across multiple engineering teams • Comfortable developing and leading customer presentations and collaborative technical engagements • Nice-to-have experience with embedded Linux or Linux-based product development • Nice-to-have experience with networking products, telecommunications, distributed systems, or cloud-connected appliances • Nice-to-have experience with secure boot, trusted execution, hardware-backed identity, cryptographic key management, signed software updates, or device lifecycle security • Nice-to-have experience with vulnerability reproduction, SAST, DAST, fuzzing, penetration testing, binary analysis, reverse engineering, or runtime security analysis • Nice-to-have familiarity with CycloneDX VEX, CSAF, SPDX, purl, CPE, CVE, CVSS, CWE, CISA KEV, vulnerability disclosure, PSIRT, ISO/IEC 27001, NIST SSDF, OWASP SAMM, or IEC 62443 • Relevant security or software certifications are nice to have

🏖️ Benefits

• Privacy protection throughout the recruitment process • Phone/video interviews • Technical/skills assessments if applicable • In-person or final interviews • Professional references and employment or education verification • Onboarding preparation, orientation, and first-day support

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume