Haystack
← Back to Jobs
Technology
AD

AppSec Developer

AdientOne LLCMontreal, QC🇺🇸United StatesPosted 31 Aug 2026

Quick Overview

Seniority
Mid Senior
Work mode
Hybrid
Location
Montreal, QC, United States
Posted
17 hours ago
MicroservicesEncryptionOWASPSAMLSonarQubeAzureConfluenceJWTJavaJiraKubernetesStakeholder Management

Job Description

DUTIES AND RESPONSIBILITES:
• Responsible for elicitation, analysis, and documentation of business requirements.
• Research and exploration of user requirements, costs, and benefits in support of documentation required for the demand management process.
• Responsible for analyzing the business needs to identify new processes and process improvements that will meet those needs.
• Documents current business processes and models to define requirements and/or gaps.
• Analyze detailed system factors including input/output requirements, information and paper flow, hardware, and software needs.
• Analyze “soft" system factors including roles, responsibilities, policy, culture, etc.
• Evaluate the impact of potential software and process changes on the organization.
• Develop and facilitate groups as necessary in pursuit of eliciting and defining requirements.
• Assist in the creation of the business case documentation.
• Understanding of architectural consistency and usability standards.
• Defines and develops user test cases and validates test results during testing.
• Executes unit and functional test cases.
• May conduct system demonstrations and training sessions, as well as participate in design/review of training content.
• Plays a third level support role by helping to troubleshoot and resolve issues with production systems.
• Participates in associate meetings and communicates any concerns to management.


QUALIFICATIONS AND REQUIREMENTS:
• Bachelor’s degree in computer science, Information Systems, Business, or another related field or equivalent work experience.
• Proven experience leading data migration requirements from legacy systems into a new ERP (Sage X3) environment
• Strong hands-on expertise in requirements elicitation, documentation, and management, with emphasis on data mapping, transformation rules, and validation
• Deep understanding of data structures, data quality, and migration best practices, with the ability to identify gaps and risks early
• Self-driven and accountable professional with strong stakeholder management and communication skills, able to drive outcomes with minimal oversight
• Working knowledge of Confluence and JIRA.
• Experience in any of the following business areas is desired: Sales operations, order entry, accounting, finance, procurement, warehouse operations, order management, and order fulfillment.
• Minimum of 3-5 years’ business analysis or systems analysis experience is preferred.
• Bonus: Sage X3 experience (ERP).


Associate is expected to operate at a proficient level across the following areas of technical knowledge and skill:
• Ability to organize and prioritize work.
• Detail oriented, proactive, creative, and efficient
• Intermediate level abilities in Excel, Outlook, PowerPoint, Visio, and Word
• Familiarity with application integration methods to include understanding of data mapping process.
• Ability to effectively work both independently and collaboratively in a team environment
• Ability to work on simultaneous and complex projects, with domain expertise in at least one business area.
• Expertise in ERP solution selection and implementation is a plus
• Ability to communicate effectively to both technical and non-technical audiences in written and non-written format
• Ability to work with all levels of associates
• Ability to work with minimal supervision in a very dynamic environment
• Ability to learn new systems and tools
• Knowledge of software development life cycle methodologies, processes, and procedures.
• Active listener
• Effective in a variety of formal/informal presentation settings: one-on-one, small, and large groups.

Job Title: AppSec Developer

Location: Montreal, QC

Duration: 10 Months

 

We are looking for a developer AppSec will play a cross-cutting and structuring role as a center of excellence in secure development.

This person will be required to collaborate closely with the development, CI/CD, information security teams, as well as the teams responsible for governance and responsible use of AI.

 

Main responsibilities

Application security and security practices

  • Define, maintain and evolve the security development standards used across Desjardins
  • Ensuring the security of internally developed frameworks
  • Identify vulnerabilities, assess the risks, and recommend pragmatic and appropriate corrective measures.
  • Promote the secure by design approach and shift left security
    • Design, develop and maintain reusable Java security libraries, frameworks and components across the organization.
    • Integrate application security mechanisms such as authentication, authorization, secure secret management, encryption, traceability, and secure logging.
    • Ensuring the security of internally developed frameworks , from their design to their use in production.
    • Conduct code reviews of critical components and propose security and maintainability improvements.
    • Supporting teams in the integration and use of common security components.

AppSec Center of Excellence

  • To act as an organizational reference in application security for development
  • Participate in the development of common patterns, guides and tools
  • Promote a shared safety culture, aligned with the company's values.
    • Developing common technological assets to enable the adoption of best security practices by development teams.
    • To act as a mentor and technical advisor to developers on the challenges of secure development and securing Java applications.
    • Participate in the evolution of security services and platforms made available to delivery teams.

Integration into the CI/CD chain

  • Collaborating with DevOps and CI/CD teams to:
    • Participate in the integration of AppSec controls into pipelines (SAST, DAST, SCA, secrets)
    • Participation in the implementation of vulnerability monitoring, detection and correction tools

 

Requirements and qualifications

  • Significant experience in object-oriented software development, with advanced expertise in Java.
  • Demonstrated experience in developing reusable technical frameworks, libraries or components.
  • Proven expertise in application security (AppSec).
  • OWASP Top 10 vulnerabilities, CWE and code security best practices.
  • Mastery of authentication and authorization concepts (OAuth2, OpenID) Connect, JWT, SAML or equivalents).
  • Experience in developing security mechanisms such as:
    • encryption and key management;
    • management of secrets;
    • secure logging;
    • data validation and protection;
    • controls and API protection.
  • AppSec tools and CI/CD pipelines.
  • Experience with tools such as SonarQube, Wiz, Kubernetes, GitHub/Azure DevOps, SAST, DAST and SCA.
  • Good understanding of distributed architectures, microservices and cloud environments.
  • Strong interest in AI-related security issues

Similar jobs

Browse related jobs

Apply now