Senior Application Security Software Engineer (Java)

Emburse

  • Toronto, ON
  • Permanent
  • Full-time
  • Just now
About the CompanyAt Emburse our mission is to help make our users' lives - and their businesses - better. We are dramatically transforming how organizations manage corporate expenses and invoices. We humanize work by automating manual tasks and saving users' time, so they can focus on what matters most - their family, community, or more rewarding work. We help CFO's give their employees a simple and amazing experience while ensuring compliance and reducing costs. Our solutions are tailored for companies from start-ups and SMBs to enterprises such as Microsoft, Pinterest, Bosch, Bill & Melinda Gates Foundation, and Estee Lauder. We have more than 18,000 customers and 12 million users globally.Emburse is looking for a passionate software engineer to focus and contribute to the security of our solutions.Join us as a Software Engineer with a focus on secure coding and application security. You'll be the go-to engineer who not only detects vulnerabilities but actually fixes them, making our systems stronger every day.As a senior engineer in this role you'll have the opportunity to work with leadership and many different development teams helping improve our security posture and processes while being hands-on and contributing significantly to the existing codebase.\nWhat You Will Do:
  • Protect & strengthen our products by proactively finding and fixing security flaws in the codebase.
  • Build & deliver secure, scalable software using Java, Spring, AWS, SQL/NoSQL, and microservices.
  • Partner with security and development teams to ensure new features ship securely.
  • Respond and resolve: act quickly to minimize impact during security incidents.
  • Mentor and collaborate with junior developers, contributing to a culture of learning.
  • Shape best practices for API security, secure coding, and documentation.
  • Lead by example in code reviews, debugging, and advanced refactoring
What You Will Bring:
  • 4-6 years of software development experience in a professional setting.
  • Strong Java + Spring expertise; comfort with AWS, microservices, SQL/NoSQL.
  • Familiarity with JavaScript (highly preferred).
  • Knowledge of secure coding practices (OWASP, input validation, static analysis tools).
  • Understanding of authentication & authorization (OAuth2, SAML, JWT, LDAP).
  • Experience designing secure RESTful APIs.
  • Comfort working in Agile/Scrum, DevOps environments, and OS X/Linux.
  • A collaborative mindset, with the ability to mentor others and lead small projects.
  • Bachelor's degree in Computer Science or related field, or equivalent years' experience
\nHow We HireWe value great candidate experiences and commit to providing a transparent interview process and responsive communication. Qualified candidates will be asked to complete a short technical screening, after which interviews are scheduled with several engineers at Emburse. During the interview process, you'll have the opportunity to speak openly with engineers about their experiences working at the company. We're productive with decisions and usually complete the interview process with a candidate within two weeks.Emburse provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Emburse complies with applicable state and local laws governing nondiscrimination in employment in every location where the company has facilities. This policy applies to all terms and conditions of employment.

Emburse