Bilingual Security Analyst - AppSec

• Integrate, configure, and maintain Application Security tools such as SAST, DAST, SCA, and container scanning
• Automate security testing processes and maintain AST tool infrastructure
• Support development teams in adopting and integrating AppSec tools into their SDLC
• Use automated tooling to detect vulnerabilities and act as a technical security expert to assist teams in remediation
• Conduct manual code reviews for security compliance purposes
• Document and update standards and guides in a fast-evolving application security landscape
• Create and maintain processes helping developers integrate and use security tools
• Recommend corrective actions through clearly structured guides and procedures
• Guide development teams on designing applications with a security-first mindset
• Support threat modeling exercises and document access models
• Ensure alignment with security frameworks such as NIST and ISO 27001

• Strong understanding of the SDLC, DevOps practices, and CI/CD pipelines
• Hands‑on experience with AppSec tooling including SAST, DAST, SCA, container scanning, secrets detection, and IaC scanning
• Ability to write and maintain scripts in Python, Bash, or PowerShell to automate security tasks
• Knowledge of web technologies such as JavaScript or TypeScript
• Knowledge of backend stacks such as .NET or Java
• Strong knowledge of common vulnerability types and recommended remediations, specifically OWASP Top 10
• Familiarity with threat modeling and Agile methodologies
• Strong analytical thinking and ability to communicate complex security concepts to technical and non‑technical audiences
• Experience integrating security into cloud environments is an asset
• Experience with Snyk mandatory
• Mandatory bilingualism (French and English) for frequent interactions with English-speaking partners and suppliers

Experience integrating security into cloud environments is an asset

• Benefit from a stable contract of over one year
• Work in a remote environment with occasional travel to Montreal or Quebec City
• Play a key role in improving the cybersecurity maturity of a large organization
• Collaborate in an environment where ideas are openly shared