Snyk Application Security SME-6

Role: Snyk Application Security SME
Employment: Full Time
Location: Toronto, ON
Work Arrangement: Hybrid – 4 Days/Week

Job Description

We are seeking a Full Time Snyk Application Security SME with extensive Application Security, Cybersecurity, and DevSecOps experience. The ideal candidate will provide technical expertise in Snyk implementation, administration, application security tooling migration, and secure software development practices within an enterprise environment

Key Responsibilities

• Lead enterprise Snyk implementation, administration, and engineering activities
• Support SAST, SCA, and DAST application security programs
• Lead application security tooling migration, preferably from Veracode to Snyk
• Configure and optimize Snyk security policies, integrations, workflows, and reporting
• Collaborate with development, DevSecOps, security, and technology teams
• Support application security across regulated enterprise environments
• Establish secure software development standards and security best practices
• Assess application vulnerabilities and drive remediation with development teams
• Support security governance, compliance, and application security assessments
• Provide technical guidance, training, and SME support for Snyk adoption

Required Skills

• 10+ years of Application Security, Cybersecurity, or DevSecOps experience
• 5+ years of hands-on enterprise SAST, SCA, and DAST experience
• 3+ years of Snyk implementation, administration, or engineering experience
• Experience migrating application security tools, preferably Veracode to Snyk
• Experience in banking, financial services, insurance, healthcare, or government environments
• Strong knowledge of NIST SSDF, NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2
• Snyk certification or advanced Snyk training preferred
• CISSP, CSSLP, GWAPT, GWEB, CEH, AZ-500, AWS Security Specialty, or equivalent certification preferred