Application Security, Senior Specialist

Who We Are:

Every transaction matters. Every Canadian matters. At Interac we protect both driving trust security and inclusion so our digital economy thrives.

Founded in 1984 Interac connects Canadians through secure digital payments advanced identity verification and industry-leading fraud protection. Connecting banks businesses and individuals Interac enables millions to send receive and manage money safely and effortlessly every day across both digital and physical environments.

As the backbone of Canadas financial ecosystem Interac facilitates over 20 million transactions daily supported by trusted partnerships with government and financial institutions. Consistently ranked as Canadas most reputable financial technology brand Interac is deeply embedded in the daily lives of Canadians.

Who You Will Work With:

The Application Security Senior Specialist will play a critical role in safeguarding our ecosystem by ensuring that our applications are designed built and deployed securely. You will work closely with engineering product cloud and security teams to embed security into the software development lifecycle model threats associated with the application identify and assist engineering in mitigating vulnerabilities during build reduce security defects into prod and champion securebydesign principles across the organization.

What YouWillDo:

Secure Development Lifecycle (SDLC) Enablement

• Embed security controls and best practices into all phases of the SDLC.

• Conduct secure design reviews threat modeling and architecture assessments for new and existing applications.

• Partner with engineering teams to ensure secure coding practices and frameworks are consistently applied.

• Provide guidance on secure API design microservices security and cloudnative application patterns.

Vulnerability Identification & Remediation

• Perform application security assessments including static/dynamic analysis dependency scanning and manual code review.

• Triage prioritize and track remediation of vulnerabilities across web mobile and backend systems.

• Collaborate with development teams to provide actionable remediation guidance and validate fixes.

• Support penetration testing activities and coordinate followup actions.

Security Tooling Automation & DevSecOps

• Maintain and optimize AppSec tools such as SAST SCA DAST secrets scanning and container security platforms.

• Integrate security tooling into CI/CD pipelines to enable automated scalable security testing.

• Identify opportunities to improve automation reduce friction and enhance developer experience.

Risk Assessment Governance & Compliance

• Assess applicationlevel risks and contribute to enterprise risk reporting.

• Ensure application security practices align with regulatory requirements and industry standards (e.g. PCI DSS SOC 2 OWASP).

• Support audit activities by providing evidence documentation and subjectmatter expertise.

CrossFunctional Collaboration & Security Advocacy

• Act as a trusted advisor to engineering product and cloud teams on application security matters.

• Deliver training workshops and secure coding sessions to elevate security awareness across the organization.

• Communicate complex security issues in a clear actionable way to both technical and nontechnical stakeholders.

• Stay current with emerging threats vulnerabilities and security technologies and proactively assess their impact on the organization.

WhatYou Bring:

• 5 years of experience in application security software security engineering or related roles within FinTech SaaS or cloudnative environments.

• Strong understanding of modern application architectures (microservices APIs containers serverless).

• Expertise in DevSecOps practices and SSDLC frameworks

• Handson experience with SAST SCA DAST secrets scanning and CI/CD security tooling.

• Proficiency in at least one programming language (e.g. Java Python JavaScript Go) and familiarity with secure coding practices.

• Experience performing threat modeling code reviews and vulnerability assessments.

• Knowledge of cloud security principles (AWS Azure or GCP).

• Familiarity with OWASP Top 10 CWE NIST and other security frameworks.

• Strong communication skills and the ability to influence without authority.

• A proactive problemsolving mindset and a passion for building secure resilient systems.

• Cybersecurity certifications such as CISSP CSSLP CCSP OSCP

• Eligibility to work for Interac Canada in a full-time capacity.

WhatWereOffering:

The hiringrangefor this position is$85000 - $105000 and you will also be eligible for our short-term incentive plan. The exact amount will depend on factors such as skills experience and job-related knowledge butInteracscommitment goes beyond compensation. Our Total Rewards package is designed to support your well-being and future and includes:

• Generous vacation and wellness days to help you recharge

• Comprehensive employer-paid benefits coverage for peace of mind

• Market-leading employer-funded RRSP program to invest in your future

• Flexible hybrid work model for better work-life balance

• Accessto afree and confidential 24/7 employee & familyassistanceprogram to offer support for you and your immediate family

• Pregnancy and parental leave top-up to support growing families

• Charitable donation matching with United Way to amplify your impact

Why Join Us

At Interac the impact we make and the people who drive it is profound. When you become part of our team youre joining a purpose-driven organization thats shaping the future of digital finance in Canada. Heres what you can expect:

• Investing in the Future Help us unlock digital prosperity for all Canadians.

• Innovative Thinking Collaborate on products practices and platforms that redefine whats possible.

• Inclusive Culture Be empowered to bring your whole self to work and realize your full potential.

• Inspiring Community Work in an ecosystem where we lift each other up and rise together.

• Intentional Support Enjoy flexible supportive offerings that prioritize your total wellness.

Additional Pre-Employment Requirements:

To ensure the integrity of our organization successful candidates will be required to complete background checks which may include Canadian Criminal Credit Check Canadian ID Cross-Check Public Safety Verification 5-year Employment Verification Education Verification Credit Check and Social Media Check.

Equal Opportunity Employer

Interac is also an equal opportunity employer committed to fostering a diverse and inclusive workplace. We believe that innovation thrives when people from different backgrounds experiences and perspectives come together. Thats why we are committed to providing fair and equitable employment opportunities for all individuals without discrimination based on race color ancestry ethnic origin place of origin citizenship creed sex sexual orientation gender identity or expression age marital or family status disability or any other characteristic protected by applicable law.

If you require accommodation during any stage of the application or recruitment process please contact us at We will work with you to meet your needs.

Please be aware that certain individuals are misusing Interac Corp.s name and logo to promote fictitious employment opportunities. Interac Corp. never requests solicits or accepts any form of payment in exchange for employment. Any such offers are fraudulent and should be disregarded. Interac Corp. assumes no liability for any claims losses damages expenses or inconveniences arising from or related to these fraudulent activities. Such communications do not constitute an offer or representation by Interac Corp. or its subsidiaries and affiliates.