- Ontario, Canada
- Full-time · Senior
- $110K–$150K per year
- 6+ years
A hands-on technical role focused on securing the Paymentus SaaS platform by partnering with engineering teams to identify and remediate risks across web apps, APIs, microservices, and AI-enabled components.
Compensation
$110k-$150k
Responsibilities
- Perform application security reviews for Paymentus SaaS platform applications, services, APIs, and supporting application infrastructure.
- Partner with software engineering teams to embed security into the software development lifecycle (requirements, architecture, design, development, testing, deployment, and post-release).
- Conduct threat modeling and secure architecture reviews for web applications, RESTful APIs, microservices, cloud-native services, AI-enabled features, and integrations.
- Review source code and application design for services written primarily in Java, NodeJS, Python, and Golang.
- Identify, validate, and help remediate common application security vulnerabilities (injection flaws, broken access control, authentication weaknesses, authorization bypasses, insecure deserialization, SSRF, XXE, XSS, CSRF, business logic flaws, insecure file handling, secrets exposure, and sensitive data leakage).
Requirements
- Bachelor’s Degree in Engineering
- Computer Science
- Software Engineering
- Information Security
- or equivalent practical experience