Senior Application Security Engineer, Pointclickcare
$108-132.2k
Technology for long-term care providers
Be an early applicant
Technology for long-term care providers
1001+ employees
Be an early applicant
$108-132.2k
1001+ employees
Company mission
To advance healthcare technology and make a meaningful impact on the lives of millions.
Role
Who you are
- 5-7 years of experience in equivalent role
- Bachelor’s degree in computer science, Cybersecurity, or related field
- Basic understanding of OWASP Top 10 and common vulnerabilities (e.g., SQLi, XSS, CSRF)
- Familiarity with advanced vulnerability classes, such as business logic flaws and secure application design principles
- Awareness of software architecture patterns and principles (e.g., microservices, REST APIs)
- Understanding of secure architecture frameworks like SABSA or CSA
- Good exposure to threat modeling techniques (e.g., STRIDE)
- Hands-on experience performing and documenting threat models for applications and systems
- Familiarity with secure software development lifecycle (SDLC) principles
- Experience integrating security requirements into SDLC and collaborating with development teams
- Proficiency in a programming language (e.g., Java, JavaScript and Python)
- Awareness of cloud security principles and basic knowledge of platforms like AWS, Azure, or GCP
- Hands-on experience implementing or auditing cloud security controls in a major cloud provider
- Strong analytical skills with the ability to communicate basic security concepts to development teams
- Proven ability to lead discussions on security design, risk prioritization, and architecture improvements
- Familiarity with security tools (e.g., static code analysis, SAST/DAST tools)
- Experience configuring and using security tools within CI/CD pipelines for automated security testing
What the job involves
- The Application Security team consists of a group of highly skilled engineers who are passionate about safeguarding our company’s applications and platforms
- With a mix of remote and hybrid team members, we embrace flexibility while fostering strong collaboration across projects
- Our team operates at the forefront of application security, offering opportunities to work on innovative solutions, tackle complex challenges, and make a meaningful impact on the company’s security posture
- Joining this team means becoming part of a supportive environment that values growth, learning, and cutting-edge security practices
- The Senior App Sec Engineer plays a key role in ensuring the security of our applications and systems by supporting the design and implementation of secure architecture practices
- This role exists to help the organization proactively identify and mitigate security risks during the development lifecycle, ensuring alignment with industry best practices and compliance standards
- As a Junior Architect, you will collaborate with development teams to integrate security into application designs, assist with threat modeling, and support the adoption of secure coding standards
- This position provides an excellent opportunity to grow technical and architectural skills in a fast-paced, security-first environment
- Assist in designing secure application and system architectures that align with organizational and compliance requirements
- Collaborate with senior architects and development teams to ensure security is integrated into design and development processes
- Responsible for contributing to the development of secure and scalable frameworks by assisting senior architects in designing and implementing foundational components that align with organizational security standards and best practices
- Document security controls and architectural decisions for future reference
- Perform threat modeling to identify and evaluate potential security risks in application designs
- Work with cross-functional teams to recommend mitigation strategies for identified threats
- Maintain and update threat models as applications and systems evolve
- Provide guidance on secure coding practices and assist development teams in adhering to security standards
- Review technical specifications and requirements to ensure security is embedded throughout the development lifecycle
- Conduct security-focused design reviews for new features and applications
- Support the implementation and integration of security tools into CI/CD pipelines
- Help monitor and analyze tool outputs to identify and prioritize security improvements
- Research and suggest tools or technologies to enhance security architecture practices
- Assist in developing and delivering training sessions on secure design principles and practices
- Stay current with industry trends and emerging threats to contribute to team knowledge sharing
Our take
The demand for long-term support for the elderly is growing, putting pressure on the already overstretched age care industry. PointClickCare aims to solve this problem by providing care providers with a suite of cutting-edge software tools.
PointClickCare's software gives caregivers access to immediate, point-of-care data insights into their patients. This is proven to improve patient outcomes, ease care transitions and improve efficiency. Having been founded in 2000, PointClickCare is now one of the biggest names in care tech and its software is used by over 26,000 care facilities.
PointClickCare has made a series of partnerships - such as with pharmaceutical corporation Pfizer, and ChartPath, a leading EHR solution for care practices - alongside acquiring the connected care platform Audacious Inquiry. These partnerships and acquisitions aim to improve its adaptability in the market. The company has demonstrated strong ambition and performance, showcased by its being named the top long-term care software provider by KLAS four times in a row.
Steph
Company Specialist at Welcome to the Jungle
Insights
0% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Feb 2024
$0.1m
GRANT
Feb 2018
$141.6m
LATE VC
Total funding: $226.2m
Company benefits
- Competitive Wages and Bonus Program
- Comprehensive Benefits
- Onsite Cafeteria
- Onsite Gym
- RRSP/401K program with employer matching
- Flexible Paid Time Off
- Work From Home Policy
- Maternity & Paternity Top Up
- Training and Development Programs
- Corporate Discounts Program
- Games Room and Employee Lounge
- Onsite Wellness Services (dental, massage, optometry, etc.)
Company values
- People: We treat customers, team members and shareholders the way they want to be treated.
- Performance: We are above average talent and produce above average results
- Passion: We are passionate about working at PointClickCare.
Company HQ
Mississauga, ON
Articles
Leadership
Mike Wessinger
(Executive Chair)Board Member at C100. Was appointed by the Ministry of Health to the Ontario Health Data Council.
Dave Wessinger
(CEO)Previously served as PointClickCare's COO.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 16 more jobs at Pointclickcare