Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Application Security Engineer role.

Rezi rewrites your resume against TMX Group's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Application Security Engineer posting at TMX Group — free, in seconds.

About the Role

An Application Security Engineer will be responsible for implementing the design and execution of our Application Security Programme, including architecting secure design principles, identifying complex vulnerabilities, conducting security assessments, and working closely with development teams to promote secure coding practices.

Responsibilities

Lead and execute ongoing application security testing against the organization’s product suite.
Collaborate with development and product teams to design secure application architectures that meet business requirements while minimizing security risks.
Perform thorough code reviews to identify security flaws, coding errors, and potential attack vectors in application codebases.
Articulate complex technical vulnerabilities in a clear, actionable manner to key stakeholders, including development teams, product owners, and executive leadership.
Provide guidance on the application vulnerability management lifecycle, tracking vulnerabilities according to our risk management process and ensuring development teams successfully resolve identified issues.
Provide guidance to developers and other team members on secure coding practices, security best practices, and latest security trends.
Maintain Key Performance Indicator (KPI) reports and metrics summarizing the organization's application security posture.
Stay up to date with the latest security tools and technologies and evaluate their effectiveness in streamlining application security objectives.
Ensure applications adhere to relevant security standards, regulations, and industry best practices.
Identify advanced application-level security vulnerabilities in our products using modern penetration testing techniques and threat modeling.
Create and maintain detailed documentation related to application security architectures, design decisions, and security guidelines.
Cultivate strategic relationships with development teams and engineering leadership to ensure smooth execution and cultural adoption of the security testing program.
Partner with development and DevOps teams to architect and automate security tests and guardrails into continuous integration/continuous deployment (CI/CD) pipelines.
Maintain deep expertise in emerging technologies, novel attack vectors, and evolving vulnerability landscapes.

Requirements

Proven hands-on experience (ideally 3+ years) of performing application security engineering, penetration tests, and security code reviews.
Deep, authoritative knowledge of key application security vulnerabilities (OWASP Top 10, CWE Top 25) and how to remediate them.
Experience with secure coding practices and secure development lifecycle.
Knowledge of modern development methodologies.
Understanding of common CI/CD environments.
Strong understanding of web application, cloud security, and microservices architectures.
Advanced knowledge of key application layer protocols and data formats (HTTP, WebSockets, SQL, JSON, Protobufs).
Strong proficiency in common application development languages and frameworks, with the ability to perform secure code review (C++, C#, Python, or JavaScript).
Deep working knowledge of cryptographic protocols, implementations, and best practices (TLS).
Experience with interpreting vulnerability scanning and penetration testing results.
Previous knowledge in conducting penetration testing as well as penetration testing methodologies is a plus.
Knowledge of cloud security and cloud architecture (CNAPP, Docker/Kubernetes, AWS Lambda).
Working understanding of network protocols, firewall configurations, and common web protocols.
Expert-level use of common industry tools (Burp Suite Professional, Chrome/FF dev tools, SQLmap, Wireshark, CSPM and SAST/DAST tools).
Excellent written and verbal communication skills—able to express complex technical issues in a concise, accurate, and business-impact context.
Strong pragmatism—expert at identifying strategic compromises that balance security risk with business and engineering delivery needs.
Applicant must be authorized to work in the country where this position is located.
Company is not currently sponsoring work permit applications.

Skills

Application Security Engineering
Penetration Testing
Security Code Reviews
OWASP Top 10
CWE Top 25
Secure Coding Practices
Secure Development Lifecycle
Modern Development Methodologies
CI/CD Environments
Web Application Security
Cloud Security
Microservices Architectures
HTTP
WebSockets
SQL
JSON
Protobufs
C++
C#
Python
JavaScript
Cryptographic Protocols
TLS
Vulnerability Scanning
Threat Modeling
CNAPP
Docker
Kubernetes
AWS Lambda
Network Protocols
Firewall Configurations
Web Protocols
Burp Suite Professional
Chrome Dev Tools
Firefox Dev Tools
SQLmap
Wireshark
CSPM
SAST
DAST

Work Type

Hybrid

Experience Level

3+ years

Education Level

SANS GXPN (GIAC Exploit Researcher and Advanced Penetration Tester)
OSCP / OSWE (Offensive Security Certified Professional / Web Expert)
CISSP
OSCE
OSEE
CCSAS

Salary/Compensations

105,000/year - 115,000/year CAD

Benefits

Generous time-off and leaves
Culture of flexibility and balance
Support for a life well lived

About the Company

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets.
United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress.
Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.
TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate.
Excitement - Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success.
Connection - With site hubs in some of the world’s most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work.
Impact - More than a platform, we use our talents to power mission-critical systems that drive global economic advancement, innovation, and growth. As well, our employee-led Team Impact spreads social good via our giving strategy.
Wellness - From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger “we”. Plus, with a cloud-first and hybrid workstyle, as well as generous time-off and leaves, we support a life well lived!
Growth - From a growth mindset in our work, to expansion in our business, TMX is home to action-takers energized by the achievement of ambitious growth.

Equal Opportunity

We provide accommodations for applicants and employees who require it.