IT Security Analyst – Application Security

Job Title: IT Security Analyst – Application Security
Location: Toronto, ON (Hybrid – 2 days in office)
Employment Type: Contract (6 months, with possible extension)
Hours: 9:00 AM – 5:00 PM, Monday to Friday (37.5 hrs/week)
Salary Range: $71 – $82 CAD (INC)

About the Role:
We are looking for a skilled IT Security Analyst to join a high-visibility Application Security team. In this role, you will help secure enterprise applications by identifying vulnerabilities, supporting secure software development, and mitigating security risks. This position provides exposure to multiple applications across North and South America and the opportunity to work closely with cross-functional teams in a fast-paced technical environment.
What You’ll Do:
Conduct application security assessments, including code reviews, penetration testing, and vulnerability scanning.
Work with development teams to integrate security practices into the software development lifecycle.
Develop, enhance, and implement application security controls and strategies.
Produce clear reports for technical teams and executive stakeholders on security findings.
Ensure production releases are delivered with no critical or high vulnerabilities.
Support risk management processes and recommend mitigations for web application vulnerabilities.
Must-Have Skills & Experience:
10+ years in IT Security or Application Security roles, with software development experience.
Experience performing security assessments using tools such as Checkmarx, BurpSuite, Acunetix, NetSparker, WebInspect, AppScan, SQLMap, ZAP, or Fortify.
Strong knowledge of secure coding practices and vulnerability remediation.
Excellent written and oral communication skills; ability to explain technical issues clearly.
Strong organizational and problem-solving skills.
Nice-to-Have Skills:
Experience in financial institutions or regulated environments.
Familiarity with reporting and communication strategies for technical and executive audiences.
Certifications such as CISSP, CISA, CEH, OSCP, or OSWE.
Education:
University degree or college diploma in Computer Science, Information Technology, or related technical field.
Why This Role:
High visibility position within a top-tier organization.
Opportunity to work on diverse applications and expand security expertise.
Chance to contribute to improving security practices across a global enterprise.

How to Apply:
Submit your resume to tinak@corgta.com. Please ensure you meet the must-have criteria.