{"id":1681679,"url":"https://alion.io/job/interac-application-security-senior-specialist","title":"Application Security, Senior Specialist","company":{"id":3854,"name":"Interac","domain":"interac.ca","url":"https://alion.io/company/interac","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-06T05:45:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":85000,"max":105000,"currency":"CAD","period":"year","gross":null,"usd_annual":73758},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-08T00:00:00Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-06T17:43:52Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"Who We Are:\nEvery transaction matters. Every Canadian matters. At Interac, we protect both - driving trust, security, and inclusion, so our digital economy thrives. \nFounded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day - across both digital and physical environments.\nAs the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.\nWho You Will Work With:\nThe Application Security, Senior Specialist will play a critical role in safeguarding our ecosystem by ensuring that our applications are designed, built, and deployed securely. You will work closely with engineering, product, cloud, and security teams to embed security into the software development lifecycle, model threats associated with the application, identify and assist engineering in mitigating vulnerabilities during build, reduce security defects into prod, and champion secure-by-design principles across the organization.\nWhat You Will Do:\nSecure Development Lifecycle (SDLC) Enablement\nEmbed security controls and best practices into all phases of the SDLC.\n\nConduct secure design reviews, threat modeling, and architecture assessments for new and existing applications.\n\nPartner with engineering teams to ensure secure coding practices and frameworks are consistently applied.\n\nProvide guidance on secure API design, microservices security, and cloud-native application patterns.\n\nVulnerability Identification & Remediation\nPerform application security assessments, including static/dynamic analysis, dependency scanning, and manual code review.\n\nTriage, prioritize, and track remediation of vulnerabilities across web, mobile, and backend systems.\n\nCollaborate with development teams to provide actionable remediation guidance and validate fixes.\n\nSupport penetration testing activities and coordinate follow-up actions.\n\nSecurity Tooling, Automation & DevSecOps\nMaintain and optimize AppSec tools such as SAST, SCA, DAST, secrets scanning, and container security platforms.\n\nIntegrate security tooling into CI/CD pipelines to enable automated, scalable security testing.\n\nIdentify opportunities to improve automation, reduce friction, and enhance developer experience.\n\nRisk Assessment, Governance & Compliance\nAssess application-level risks and contribute to enterprise risk reporting.\n\nEnsure application security practices align with regulatory requirements and industry standards (e.g., PCI DSS, SOC 2, OWASP).\n\nSupport audit activities by providing evidence, documentation, and subject-matter expertise.\n\nCross-Functional Collaboration & Security Advocacy\nAct as a trusted advisor to engineering, product, and cloud teams on application security matters.\n\nDeliver training, workshops, and secure coding sessions to elevate security awareness across the organization.\n\nCommunicate complex security issues in a clear, actionable way to both technical and non-technical stakeholders.\n\nStay current with emerging threats, vulnerabilities, and security technologies, and proactively assess their impact on the organization.\n\nWhat You Bring:\n5+ years of experience in application security, software security engineering, or related roles within FinTech, SaaS, or cloud-native environments.\n\nStrong understanding of modern application architectures (microservices, APIs, containers, serverless).\n\nExpertise in DevSecOps practices and SSDLC frameworks\n\nHands-on experience with SAST, SCA, DAST, secrets scanning, and CI/CD security tooling.\n\nProficiency in at least one programming language (e.g., Java, Python, JavaScript, Go) and familiarity with secure coding practices.\n\nExperience performing threat modeling, code reviews, and vulnerability assessments.\n\nKnowledge of cloud security principles (AWS, Azure, or GCP).\n\nFamiliarity with OWASP Top 10, CWE, NIST, and other security frameworks.\n\nStrong communication skills and the ability to influence without authority.\n\nA proactive, problem-solving mindset and a passion for building secure, resilient systems.\n\nCybersecurity certifications such as CISSP, CSSLP, CCSP, OSCP\n\nEligibility to work for Interac Corp. in Canada in a full-time capacity.\n\nWhat We’re Offering:\nThe hiring range for this position is $85,000 - $105,000, and you will also be eligible for our short-term incentive plan. The exact amount will depend on factors such as skills, experience, and job-related knowledge, but Interac’s commitment goes beyond compensation. Our Total Rewards package is designed to support your well-being and future, and includes:\nGenerous vacation and wellness days to help you recharge\n\nComprehensive employer-paid benefits coverage for peace of mind\n\nMarket-leading employer-funded RRSP program to invest in your future\n\nFlexible hybrid work model for better work-life balance\n\nAccess to a free and confidential 24/7 employee & family assistance program to offer support for you and your immediate family\n\nPregnancy and parental leave top-up to support growing families\n\nCharitable donation matching with United Way to amplify your impact\n\nWhy Join Us?\nAt Interac, the impact we make, and the people who drive it, is profound. When you become part of our team, you’re joining a purpose-driven organization that’s shaping the future of digital finance in Canada. Here’s what you can expect:\nInvesting in the Future - Help us unlock digital prosperity for all Canadians.\n\nInnovative Thinking - Collaborate on products, practices, and platforms that redefine what’s possible.\n\nInclusive Culture - Be empowered to bring your whole self to work and realize your full potential.\n\nInspiring Community - Work in an ecosystem where we lift each other up and rise together.\n\nIntentional Support - Enjoy flexible, supportive offerings that prioritize your total wellness.\n\nAdditional Pre-Employment Requirements:\nTo ensure the integrity of our organization, successful candidates will be required to complete background checks, which may include, Canadian Criminal Credit Check, Canadian ID Cross-Check, Public Safety Verification, 5-year Employment Verification, Education Verification, Credit Check, and Social Media Check.\nEqual Opportunity Employer\nInterac is also an equal opportunity employer committed to fostering a diverse and inclusive workplace. We believe that innovation thrives when people from different backgrounds, experiences, and perspectives come together. That’s why we are committed to providing fair and equitable employment opportunities for all individuals, without discrimination based on race, color, ancestry, ethnic origin, place of origin, citizenship, creed, sex, sexual orientation, gender identity or expression, age, marital or family status, disability, or any other characteristic protected by applicable law.\nIf you require accommodation during any stage of the application or recruitment process, please contact us at . We will work with you to meet your needs.\nPlease be aware that certain individuals are misusing Interac Corp.’s name and logo to promote fictitious employment opportunities. Interac Corp. never requests, solicits, or accepts any form of payment in exchange for employment. Any such offers are fraudulent and should be disregarded. Interac Corp. assumes no liability for any claims, losses, damages, expenses, or inconveniences arising from or related to these fraudulent activities. Such communications do not constitute an offer or representation by Interac Corp. or its subsidiaries and affiliates.","description_format":"text","description_chars":7887,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Generous vacation","Hybrid work","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cards & Card Issuing","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-02T09:46:16Z"}],"visa":[],"liveness":{"score":58,"band":"ok","label":"Likely open","p_open":1,"p_active":0.769,"p_room":0.75,"age_days":28,"expected_fill_days":30,"reasons":["conf:1","velocity","win:late"],"computed_at":"2026-10-06T05:45:30Z"},"pay":{"stated_usd_annual":73758,"is_top_pay":false},"html_url":"https://alion.io/job/interac-application-security-senior-specialist","json_url":"https://alion.io/job/interac-application-security-senior-specialist.json","meta":{"generated_at":"2026-10-07T00:20:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":502,"day_limit":5000,"remaining_today":4498,"minute_limit":60,"resets_at":"2026-10-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3854},"rest":"https://alion.io/mcp/rest/get_company?id=3854"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finterac-application-security-senior-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finterac-application-security-senior-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finterac-application-security-senior-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/interac-application-security-senior-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finterac-application-security-senior-specialist"}]}