Our Marsh Information Security team is seeking candidates for the following position based in Toronto, ON and on‑site 3 days a week. The Application Security Engineer/Developer will act as a security advisor to various teams across Marsh and develop code samples and prototypes.ResponsibilitiesServe as a security advisor to various teams across Marsh.Review projects for security weaknesses, risks, and vulnerabilities.Stay at the forefront of new security controls, technology trends, and emerging threats.Create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews.Collaborate with various Marsh technology organizations.Quickly dive into new projects to provide security expertise and support.QualificationsPassion for Information Security and problem solving.Experience with microservices, Kubernetes, and cloud technologies.Proficiency in building and using APIs, scripts, and applications, preferably in Python.Strong understanding of authentication methods, protocols, and Application Security fundamentals.Experience with Security by Design frameworks, Threat Modeling, and Secure SDLC.Good understanding of cryptography, encryption and digital signature.Preferred QualificationsExperience in securing LLM‑based applications and AI agents, including RAGs.Knowledge of Federation, SAML, and OAuth protocols.Ability to quickly absorb new technologies and write position papers.BenefitsProfessional development opportunities, interesting work and supportive leaders.Vibrant and inclusive culture to create new solutions and have impact for colleagues, clients and communities.Range of career opportunities, benefits and rewards to enhance well‑being.Applicable base salary range for this role is $126,000 to $176,000.We are excited to offer a competitive total rewards package which includes health and welfare benefits, tuition assistance, retirement programs and employee assistance programs.Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working on‑site with clients at least three days per week.Contact for accommodations due to a disability or medical need.R_ #J-18808-Ljbffr
Application Security Engineer/Developer
MARSH
toronto, toronto
Published 20 days ago
Report job