Security Research Engineer

About BoostSecurity

Boostsecurity.io is a cybersecurity technology startup. Our mission is to enable software teams to easily ship secure software, and secure their software supply chains, through smart security automation that developers love.

The Role

BoostSecurity is looking for Security Research Engineers to expand our team in Montreal and help us continue to grow our product. We are building technology for technologists, and this will be an opportunity to work on a high-performing security team supporting a fast-growing security technology. This role is ideal for a Senior Engineer interested in cutting-edge security research related to software supply chain security.

What you'll work on as part of our team

• Design, implement, and test security capabilities on our platform that will secure thousands of companies for the decade to come!
• Work with a PM, Designer and other engineers to ship in a quick-moving, iterative environment; we are constantly balancing between moving quickly and maintaining a high bar for our code and product.
• Conduct security research that covers Application Security, Cloud Infrastructure, Developer tooling, CI/CD tooling, open source software (vulnerabilities in OSS packages), and more.

Requirements

• Advanced Application Security / DevSecOps knowledge, ideally with both practitioner-in-the-field experience as well as tool builder:
• SAST / DAST / IAST experience
• Cloud security expertise (Cloud Native Security technology)
• Modern secure software development processes and tools
• Software development skills:

Although this is not a software development position, you will be using Python quite extensively here - to automate parts of your security research, as well as write PoCs...

• Comfort working in a highly agile, intensely iterative software development process

Location

• Montreal, Quebec, Canada

J-18808-Ljbffr