successfactors
Application Security Engineer (senior - principal) Landmark
Halliburton
Calgary, CAN
Lead · 3+ years experience
Onsite
Discovered 3 weeks ago
awsazurebashpowershellpythonterraform
Role Overview
As an Application Security Engineer at Landmark, you will help identify and reduce security risk in the software products and digital platforms used by the energy industry.
Working under general direction, you will perform and support application security assessments, analyze security-testing results, investigate vulnerabilities, and partner with engineering teams to move findings through remediation.
You will work across application security, secure software development, DevSecOps, cloud security, and software supply chain security.
The role requires someone who can examine technical use cases, identify realistic attack paths, distinguish meaningful risks from tool-generated noise, and provide practical guidance that helps development teams build and deliver more secure software.
Key Skills for This Role
awsazurebashpowershellpythonterraform
Full Job Posting
Key Responsibilities
- Perform application security assessments and analyze potential vulnerabilities across web applications, APIs, cloud services, and enterprise software. Review results from static application security testing, dynamic application security testing, software composition analysis, and related security tools. Validate findings, assess exploitability and business impact, identify potential attack paths, and help prioritize remediation. Work directly with software engineers to explain identified risks, recommend practical corrective actions, and track vulnerabilities through resolution. Support the integration and operation of security controls within CI/CD pipelines and software development workflows. Contribute application security requirements and guidance throughout the software development lifecycle. Review application architectures, designs, features, and technical changes for common security weaknesses and potential misuse scenarios. Retest remediated vulnerabilities and document whether corrective actions adequately address the identified risk. Support secure cloud application deployments by reviewing relevant identity, access, logging, networking, configuration, and data-protection controls. Help identify risks in open-source components, third-party dependencies, build artifacts, and other parts of the software supply chain. Document assessment results, remediation guidance, risk decisions, and security metrics clearly for technical and business stakeholders.
Qualifications
- Required Undergraduate degree in Computer Science or a related field. A minimum of three years of experience in software development, Application Security, Cybersecurity, DevSecOps, Cloud Security, or a related technical discipline. Working knowledge of the software development lifecycle and secure software development practices. Experience identifying, evaluating, or remediating security vulnerabilities in software applications. Understanding of common application attack vectors, security weaknesses, and software security controls. Ability to communicate technical security risks and remediation guidance clearly to software engineering and product delivery teams. Preferred Experience with SAST, DAST, SCA, vulnerability-management platforms, penetration-testing tools, or comparable application security technologies. Familiarity with OWASP guidance, threat modeling, API security, authentication, authorization, session management, encryption, and secure coding practices. Experience with GitLab or another source-code repository and CI/CD platform. Familiarity with Microsoft Azure, Amazon Web Services, or comparable cloud platforms, including identity and access management, logging, networking, and secure deployment concepts. Experience with Terraform, pipeline automation, infrastructure as code, or scripting using languages such as Python, PowerShell, or Bash. Familiarity with software supply chain security, including third-party dependency risk, software composition analysis, software bills of materials, artifact integrity, or CI/CD security controls. Awareness of emerging security considerations associated with AI-enabled applications, machine learning services, or AI-assisted software development. Candidates who possess qualifications exceeding the minimum job requirements may be considered for higher-level positions based on experience, additional qualifications, demonstrated capabilities, and current business needs. Depending on education, experience, and skill level, candidates may be eligible for roles ranging from Application Security Engineer to Application Security Engineer Sr or Application Security Engineer Principal. Core Competencies Application Security | Secure SDLC | DevSecOps | Vulnerability Management | SAST | DAST | Software Composition Analysis | Threat Modeling | OWASP | API Security | Cloud Security | Secure Coding | Vulnerability Remediation | CI/CD Security | Software Supply Chain Security | GitLab | Azure | AWS Halliburton is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation . Location 700 9th Ave SW Suite 2000, Calgary, Alberta, T2P 3V4, Canada Job Details Requisition Number: 212115 Experience Level: Experienced Hire Job Family: Engineering/Science/Technology Product Service Line: Landmark Software & Services Full Time / Part Time: Full Time Additional Locations for this position
Preferred Qualifications
- Required Undergraduate degree in Computer Science or a related field. A minimum of three years of experience in software development, Application Security, Cybersecurity, DevSecOps, Cloud Security, or a related technical discipline. Working knowledge of the software development lifecycle and secure software development practices. Experience identifying, evaluating, or remediating security vulnerabilities in software applications. Understanding of common application attack vectors, security weaknesses, and software security controls. Ability to communicate technical security risks and remediation guidance clearly to software engineering and product delivery teams. Preferred Experience with SAST, DAST, SCA, vulnerability-management platforms, penetration-testing tools, or comparable application security technologies. Familiarity with OWASP guidance, threat modeling, API security, authentication, authorization, session management, encryption, and secure coding practices. Experience with GitLab or another source-code repository and CI/CD platform. Familiarity with Microsoft Azure, Amazon Web Services, or comparable cloud platforms, including identity and access management, logging, networking, and secure deployment concepts. Experience with Terraform, pipeline automation, infrastructure as code, or scripting using languages such as Python, PowerShell, or Bash. Familiarity with software supply chain security, including third-party dependency risk, software composition analysis, software bills of materials, artifact integrity, or CI/CD security controls. Awareness of emerging security considerations associated with AI-enabled applications, machine learning services, or AI-assisted software development. Candidates who possess qualifications exceeding the minimum job requirements may be considered for higher-level positions based on experience, additional qualifications, demonstrated capabilities, and current business needs. Depending on education, experience, and skill level, candidates may be eligible for roles ranging from Application Security Engineer to Application Security Engineer Sr or Application Security Engineer Principal. Core Competencies Application Security | Secure SDLC | DevSecOps | Vulnerability Management | SAST | DAST | Software Composition Analysis | Threat Modeling | OWASP | API Security | Cloud Security | Secure Coding | Vulnerability Remediation | CI/CD Security | Software Supply Chain Security | GitLab | Azure | AWS Halliburton is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation . Location 700 9th Ave SW Suite 2000, Calgary, Alberta, T2P 3V4, Canada Job Details Requisition Number: 212115 Experience Level: Experienced Hire Job Family: Engineering/Science/Technology Product Service Line: Landmark Software & Services Full Time / Part Time: Full Time Additional Locations for this position
About Halliburton
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Halliburton
A427-ESG-Intern
, KSA
InternInternship
Halliburton is hiring an ESG Intern for an entry-level, full-time internship supporting professional and technical work assignments. The role develops work knowledge through standard techniques and procedures with limite
Discovered TodayView →
Consultant, Sr
Abu Dhabi, UAE
SeniorFull-time
Halliburton is seeking a senior consultant with a strong understanding of relevant science and technology to support client-facing technology solutions. The role involves communicating product value, contributing to proj
Discovered TodayView →
Service Supervisor-I-Frac Acid
Riyadh, KSA
EntryFull-time
Halliburton is seeking a Service Supervisor I for frac acid operations at well sites. The role coordinates equipment and operator activities, manages fluids and chemical inventory, and leads safety and quality practices;
Discovered TodayView →
Service Supervisor II-Frac Acid-208903
Riyadh, KSA
MidFull-time
Halliburton is seeking an experienced Frac Acid Service Supervisor to coordinate wellsite operations, equipment and crew activities, and customer service. The role requires four years of experience, completion of require
Discovered TodayView →
Consultant, Sr
Abu Dhabi, UAE
Discovered TodayFull-time
A427-ESG-Intern
, KSA
Discovered TodayInternship
Consultant, Sr
Abu Dhabi, UAE
Discovered TodayFull-time
Consultant, Sr
Abu Dhabi, UAE
Discovered Today
Sr./ Lead Payroll Specialist
Bengaluru, IND
Discovered Today
Accountant- Sr. Accountant
Bengaluru, IND
Discovered Today
Service Supervisor-I-Frac Acid
Riyadh, KSA
Discovered TodayFull-time
Service Supervisor II-Frac Acid-208903
Riyadh, KSA
Discovered TodayFull-time