Overview

Do you have a passion for application security and tackling one of the most critical challenges in modern software development? We are seeking a Senior Application Security Engineer with experience in static analyzers or compilers to join our Security Tools team at Oracle in Canada. You will collaborate with engineers to extend and support our in-house static application security testing tool, building production-quality security software.

Responsibilities

• Develop and enhance static analysis engines for detecting security vulnerabilities in code.
• Collaborate with engineering teams to integrate security tools into CI/CD pipelines.
• Design and implement new security rules and checks for the static analyzer.
• Optimize tool performance for large-scale codebases and production environments.
• Conduct code reviews and provide guidance on secure coding practices.
• Troubleshoot and resolve issues in static analysis results and false positives.
• Research emerging security threats and extend tool capabilities accordingly.
• Contribute to documentation, testing, and deployment of security tools.

Qualifications

• Bachelor's degree in Computer Science or related field; advanced degree preferred.
• 5+ years of experience in software development, with focus on security tools.
• Proven experience developing static analyzers, compilers, or similar tools.
• Strong proficiency in Java, C++, or Python for tool development.
• Deep knowledge of application security vulnerabilities (OWASP Top 10).
• Excellent problem-solving skills and ability to work independently.

Benefits

• Competitive salary and performance bonuses.
• Comprehensive health, dental, and vision insurance.
• Flexible remote work options in Canada.
• Professional development and certification reimbursement.
• Generous vacation, parental leave, and wellness programs.