Application Security Engineer, Certn
3-6 Month Contract
CA$80.1-120.1k
AI-powered background checks for enterprises
Open for applications
AI-powered background checks for enterprises
201-500 employees
Open for applications
CA$80.1-120.1k
201-500 employees
Company mission
To help companies of all sizes build trust in people.
Role
Who you are
- This is an ideal opportunity for someone passionate about secure software development, automation, and protecting people’s data in a fast-moving, product-centric environment
- Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related technical discipline; or an equivalent combination of education and practical experience
- Relevant post-secondary coursework or certifications in cybersecurity, secure software development, or cloud security are considered strong assets
- Strong understanding of secure coding principles, web application security, and common vulnerabilities (e.g., OWASP Top 10, SANS top 25)
- Proficiency with application security testing tools such as SAST, DAST, SCA, and secrets-scanning platforms
- Working knowledge of authentication and authorization mechanisms, encryption, API security, and identity management
- Ability to interpret and communicate technical security risks to both technical and non-technical audiences
- Experience integrating security into CI/CD pipelines and using automation to improve security coverage
- Analytical thinking, problem-solving, and prioritization skills with strong attention to detail
- Collaborative mindset with the ability to partner effectively across engineering, product, DevOps, and compliance teams
- Demonstrated experience performing threat modeling, code review, and vulnerability remediation within agile development environments
- Hands-on experience with cloud-native architectures and security practices across AWS, Azure, or GCP environments
- Familiarity with security frameworks and compliance standards (e.g., SOC 2, ISO 27001, NIST, GDPR, PIPEDA)
- Proven track record of improving security maturity within a fast-paced, product-focused organization
What the job involves
- We’re looking for an Application Security Engineer to safeguard our customer-facing platforms and internal systems
- In this hands-on role, you’ll embed security at every stage of the application lifecycle, from architecture and development through deployment and monitoring
- Secure Application Development:
- Embed security best practices throughout the software development lifecycle (SDLC) to ensure applications are designed and built with security in mind from the start
- Conduct secure code and architecture reviews to proactively identify and remediate vulnerabilities before they impact production
- Partner with engineering teams to create secure-by-design applications that protect sensitive applicant, client, and employee data while maintaining product performance and usability
- Threat Detection and Vulnerability Management:
- Identify, assess, and prioritize potential security risks to reduce Certn’s exposure to emerging threats and strengthen overall resilience
- Coordinate internal and third-party penetration testing to validate the effectiveness of security controls and ensure vulnerabilities are remediated promptly
- Maintain a structured vulnerability management process to ensure accountability, visibility, and measurable improvement in Certn’s security posture over time
- Security Tooling and Automation:
- Implement and manage security tools (e.g., SAST, DAST, dependency scanning, secrets detection) to continuously monitor and safeguard Certn’s applications
- Integrate automated security checks into CI/CD pipelines to enable fast, secure releases without slowing development velocity
- Leverage automation to improve efficiency, consistency, and early detection of security issues, reducing manual overhead and human error
- Governance, Compliance, and Incident Response:
- Align application security practices with global and regional standards (e.g., SOC 2, ISO 27001, GDPR, PIPEDA) to meet client and regulatory expectations
- Support audit and compliance efforts by maintaining evidence of secure processes and demonstrating control effectiveness to external and internal stakeholders
- Participate in incident response for application-related issues to minimize impact, learn from events, and strengthen future defenses
- Collaboration, Enablement, and Continuous Improvement:
- Partner with product, engineering, DevOps, and compliance teams to integrate security objectives seamlessly into business and development processes
- Promote secure development practices through training, documentation, and coaching, fostering a culture where security is a shared responsibility
- Stay current on evolving threats, technologies, and best practices to continuously enhance Certn’s security capabilities and maintain stakeholder trust
Application process
- Just so you know, the selected candidate will be required to complete a background check — so you’ll get to see first-hand what we do
Our take
Certn’s platform allows people to gain fast access to background checks, from criminal records through to motor vehicle records and even credit checks. Its software allows recruiters to save time and money in the hiring process, as the standard 3-4 days for completing background checks is reduced to hours.
Currently, the solution is used by over 2,800 enterprises, including leading employers, staffing firms and property management companies. However, it is not the only player using AI to conduct background checks; Checkr, GoodHire, and HireRight are some of the leading companies that are solving this years-old problem in different parts of the world, and Certn will have to work hard to stand out in this crowded space.
The company looks poised for a period of rapid international expansion over the next few years, thanks to considerable funding amounting to $115 million in 2023 and the acquisition of UK-based background check provider Credence and Australian Intercheck. It also astutely hired CTO Susan Davis (ex-VP of Engineering at Dessa and Xtiva Financial Systems) in 2021.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-8% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Apr 2023
$30m
SERIES B
May 2022
$50m
SERIES B
Total funding: $112.6m
Company benefits
- 4 weeks paid vacation
- 12 wellness days
- Extensive health benefits
- Family support program (including support for new parents and caregivers)
- Remote-first and support for flexible remote arrangements
- Green transportation allowance
- Fitness & wellness allowance
- Work from home allowance
- Professional development Budget
- And a few more goodies!
Company HQ
Harris Green, Victoria, BC
Leadership
Evan Dalton
(Co-Founder & Co-CEO)Former VP of Business Development at home rental fintech company RentMoola. Former Office Leasing Advisor at Cushman & Wakefield.
Owen Madrick
(Co-Founder, Co-CEO & CFO)Chartered Accountant & former VP of Finance at RentMoola. Former Grant Thornton LLP Manager, and Director of Finance at DFH Real Estate.
Andrew McLeod
(Co-Founder & Co-CEO)Forbes 30 Under 30 Nominee and Remote Tech CEO of the Year 2021. Co-founder of sports equipment company Emei Products (acquired 2021). Former CSO at RentMoola.
Share this job
View 3 more jobs at Certn