Upgrade helps customers move in the right direction with affordable and responsible financial products. Since 2017, we’ve helped over 7 million customers access over $40 billion in consumer credit. With a relentless focus on improving our customers' financial well-being, we build products that put more money in their pocket and support their journey toward a better financial future. We’re backed by some of the most prominent technology investors and were most recently valued at $6.3B.

We’re consistently recognized for our collaborative and inclusive culture. Most recently, we were named one of the World’s Top Fintech Companies by CNBC, Best Places to Work by Built In, Best Places to Work by the San Francisco Business Times, America’s Greatest Workplaces by Newsweek, Best Startup Employer by Forbes, and Healthiest Employers by Phoenix Business Journal. 

We’re looking for new team members who get excited about designing and delivering new and better products. Come join us and help build a better financial future for millions of people.

 

About the Role:

As a Senior Application Security Developer, you’ll help scale our static and dynamic code analysis, handle manual and automated pen-testing, threat modeling, and lead the overall improvement of our AppSec posture. You’ll collaborate alongside DevOps, QA, and Engineering to improve the security of applications architected on the cloud (AWS) in a microservices-based environment. 

What You’ll Do: 

Evaluate our security technology, methodology, and tools to optimize the software development life cycle
Help train developers and QA personnel to the appropriate level of software security knowledge to perform their responsibilities
Improve and support application security tool services including static analysis, dynamic testing, software composition analysis tools
Support incident response and architecture review processes whenever application security expertise is needed
Manage routine penetration testing services, including both expert consulting and managed services
Provide manual penetration testing and standards gap analysis to internal business and technology partners
Support, improve, and maintain secure development standards and application security framework projects
Support Vendor Management activities to ensure third party software and development meet security standards
Integrate threat modeling practices into the product development life cycle
Provide security requirements for test driven design to assess control effectiveness
Produce metrics reporting the state of application security programs and performance of development teams against requirements

 

What We Look For:

5+ years of relevant work experience.
Experience with agile development processes and have experience integrating secure development practices into the model
Experience writing and testing web applications, mobile applications and microservices
Familiarity with GraphQL architecture and security best practices
Basic understanding of authentication and authorization schemes including OAuth
Familiarity with a variety of development and testing tools
Experience working with one or more SAST, DAST and IAST tools
Ability to explain vulnerabilities and weaknesses, and discuss effective defensive techniques
Experience with cyber security attacks and mitigation methods (red/blue team experience)
Experience working with web applications and browser security; security assessments and penetration testing; identity and access control; applied cryptography and security protocols; security information and event monitoring and intrusion detection
Expertise in employing analytics and threat intelligence techniques, Incident response process; Software security
Experience in IT supply-chain risk management and assurance, as well as cloud security operations

 

Nice to Have:

Basic familiarity with Python for security tool automation would be a plus.

What We Offer You:

Competitive salary and stock option plan
100% paid coverage of medical, dental and vision insurance 
Flexible PTO
Competitive 401(k) and RRSP program
Opportunities for professional growth and development  
Paid parental leave
Health & wellness initiatives

The compensation range of this position in Canada is $150,000 - $250,000 CAD annually plus equity and benefits. Within this range, an individual's base pay will be dependent on a variety of factors, including without limitation, job-related knowledge, skills, education, and experience.

#LI-Remote #BI-Remote

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Upgrade does not accept unsolicited resumes from staffing agencies, search firms, or any third parties. Any resume submitted to any employee of Upgrade without a prior written agreement in place will be considered the property of Upgrade, and Upgrade will not be obligated to pay any referral or placement fee. Agencies must obtain advance written approval from Upgrade's Talent Acquisition department to submit resumes and only in conjunction with a valid, fully executed agreement. English is required for all positions, as it involves interacting with staff at Upgrade's offices worldwide.