Application Security Software Engineer

This range is provided by Point Click Care . Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

CA $92,900.00/yr - CA$/yr

Point Click Care  is a leading North American healthcare technology platform enabling meaningful care collaboration and real‐time patient insights. For over 20 years, the company has been focused on realizing its vision: to help create a world in which providers and plans can confidently deliver frictionless care. Since its inception, Point Click Care  has grown exponentially, with over 2,200 employees working to impact millions across North America.

Recognized by Forbes as one of the top 100 private cloud companies and acknowledged by Waterstone Human Capital as Canada’s Most Admired Corporate Cultures, Point Click Care  leads the way in creating cloud-based healthcare software.

At Point Click Care , we offer a wealth of opportunities and a vibrant culture that empowers our employees. Our dynamic environment is the perfect place to advance your career while engaging in meaningful work alongside incredible colleagues. Here, you’ll discover a space where your talents can thrive, your career can grow, and your work will have a lasting impact on healthcare across North America.

We believe that work becomes profoundly fulfilling when driven by a higher purpose.

Join us and be part of a team that is making a real impact.

The Application Security team consists of a group of highly skilled engineers who are passionate about safeguarding our company’s applications and platforms. With a mix of remote and hybrid team members, we embrace flexibility while fostering strong collaboration across projects. Our team operates at the forefront of application security, offering opportunities to work on innovative solutions, tackle complex challenges, and make a meaningful impact on the company’s security posture.

Joining this team means becoming part of a supportive environment that values growth, learning, and cutting-edge security practices.

As a Application Security Software Engineer for the Application Security department, you will play a critical role in safeguarding our company's applications and platforms. App Sec Engineers have distinct areas of responsibility where you will be the App Sec contact for designated teams, remediate security issues, help teams to understand and correct vulnerabilities, provide training, and build libraries. Your primary responsibility will be to triage the various scan results daily.

This role requires a strategic thinker who can understand and address security concerns on a company-wide scale.

• Monitor and triage findings from SAST, DAST, and SCA tools to identify security vulnerabilities
• Prioritize and escalate critical issues for remediation based on risk levels and business impact
• Generate reports and provide insights to improve the effectiveness of security tools and processes
• Build, update, and maintain reusable security libraries and frameworks to standardize secure practices across development teams
• Ensure libraries address common vulnerabilities (e.g., input validation, authentication, encryption) and are easy to integrate
• Work with teams to promote adoption and provide guidance on proper usage of these libraries
• Collaborate with development, Dev Ops, and QA teams to integrate security into the software development lifecycle
• Communicate effectively with stakeholders, including developers and management, about risks, mitigation strategies, and best practices
• Act as a resource for cross-team initiatives related to security
• Contribute to the creation and enforcement of security policies and procedures
• Ensure compliance with industry standards and regulations such as OWASP, HIPAA, and HITRUST
• Support audit activities by providing evidence and documentation of compliance measures
• Participate in incident response efforts, including investigating and remediating security incidents or vulnerabilities
• Stay updated on the latest developments in application security through research, training, and conferences
• Continuously improve security practices by identifying…