Senior Security Software Engineer – Developer

Vecima Networks Inc.

. Identify and reduce security risk throughout the product lifecycle .

Posted 11/6/2026full-timeRemote • Canada, United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing production software through threat modeling, vulnerability assessment, and secure software design. Proficient in translating security risks into actionable engineering requirements while providing leadership and coaching to development teams.

Highest-signal resume keywords

Threat ModellingSecure Software DesignVulnerability AssessmentCVE MonitoringSBOM Generation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

C ProgrammingC++ ProgrammingPython ProgrammingGo ProgrammingJava ProgrammingJavaScript ProgrammingTypeScript ProgrammingLinuxCI/CDAutomated Testing

Soft Skills

Technical LeadershipCollaborationCoachingCommunicationSound Engineering Judgement

Tools & Technologies

CycloneDXSASTDASTVulnerability DatabasesSoftware Composition Analysis

Certifications & Qualifications

ISO/IEC 27001Relevant Security Certifications

Industry Keywords

Product SecurityApplication SecurityVulnerability RemediationDefense In DepthSecure Coding

Tech Stack

Tools & technologies

CloudDistributed SystemsJavaJavaScriptLinuxPythonRustTypeScriptC++Go

About the role

Key responsibilities & impact

Identify and reduce security risk throughout the product lifecycle
Lead threat modelling for products, features, and architecture changes
Identify assets, trust boundaries, attack surfaces, abuse cases, attack paths, and security controls
Review product architectures and security-sensitive designs
Translate security risks into engineering requirements, implementation guidance, verification plans, and actionable development work
Provide practical security leadership to software teams
Coach developers and architects in secure design, secure coding, threat modelling, and security testing
Improve secure product development through risk-based activities, release criteria, reusable guidance, templates, security reviews, and automated CI/CD checks
Help teams apply defense in depth, least privilege, secure-by-default behavior, and appropriate isolation boundaries
Support SBOM generation, validation, completeness, release integration, and disclosure using CycloneDX and related standards
Perform CVE monitoring and triage
Support vulnerability assessment, remediation, disclosure, customer communication, and PSIRT practices
Lead the Product Security contribution to the organization’s ISO/IEC 27001 ISMS
Lead customer engagement involving security reviews, questionnaires, contractual requirements, and audits
Work with Software Architects, Developers, Product Management, Compliance, and service provider customers
Design, build, test, release, and maintain well-secured products

Requirements

What you’ll need

5+ years of professional software engineering, security engineering, or combined experience
Significant hands-on experience securing production software
Experience with Linux, source control, code review, build systems, CI/CD, automated testing, and modern software development practices
Ability to understand production software at source-code level and work with developers on security-sensitive changes
Programming ability in at least one relevant language, such as C, C++, Python, Go, Java, JavaScript/TypeScript, or Rust
Experience applying Product Security or Application Security practices within a software development organization
Strong understanding of secure software design, common vulnerability classes, attack techniques, and defensive controls
Practical threat modelling experience using STRIDE, attack trees, abuse cases, or an equivalent risk-based approach
Experience reviewing software or system architectures from a security perspective and translating risks into engineering requirements
Experience investigating vulnerabilities and determining technical impact, exploitability, affected components, and mitigations
Experience with SBOM and software composition analysis tools and familiarity with CycloneDX
Working knowledge of software dependencies, vulnerability databases, software supply-chain risk, and vulnerability remediation
Understanding of how software is built, packaged, released, deployed, and maintained in production
Ability to explain complex technical security risks to developers, architects, product leaders, auditors, and customers
Sound engineering judgement balancing risk reduction with product constraints, delivery requirements, reliability, performance, and maintainability
Ability to lead through technical credibility, collaboration, coaching, and influence
Comfortable working across multiple engineering teams
Comfortable developing and leading customer presentations and collaborative technical engagements
Nice-to-have experience with embedded Linux or Linux-based product development
Nice-to-have experience with networking products, telecommunications, distributed systems, or cloud-connected appliances
Nice-to-have experience with secure boot, trusted execution, hardware-backed identity, cryptographic key management, signed software updates, or device lifecycle security
Nice-to-have experience with vulnerability reproduction, SAST, DAST, fuzzing, penetration testing, binary analysis, reverse engineering, or runtime security analysis
Nice-to-have familiarity with CycloneDX VEX, CSAF, SPDX, purl, CPE, CVE, CVSS, CWE, CISA KEV, vulnerability disclosure, PSIRT, ISO/IEC 27001, NIST SSDF, OWASP SAMM, or IEC 62443
Relevant security or software certifications are nice to have

Benefits

Comp & perks

Privacy protection throughout the recruitment process
Phone/video interviews
Technical/skills assessments if applicable
In-person or final interviews
Professional references and employment or education verification
Onboarding preparation, orientation, and first-day support