Staff Developer / Development Manager, Application Security
Calgary, Alberta, Canada · Remote OK
Senior+$161M raised
Staff Developer / Development Manager, Application Security Reports To: Director of Development, Architecture Location: Calgary or Remote About the Job: When this company started, it was just a few of us furiously workin…
Skills: Application Security, People Management, Ruby on Rails, React Native, AWS Security
Venture for Canada
Intern, Learning Design Administration
Calgary, Alberta, Canada · Remote Solely
Entry level
If you’re excited about building systems that empower others to lead and want to help shape Canada’s next generation of entrepreneurial, AI-ready talent for the future of work, we’d love to hear from you! Venture for Can…
Here’s your chance to be a part of our story! Carewest is one of Calgary’s leaders in exceptional care and we are looking for passionate helpers to join our team. At Carewest, our mission is to support all clients in mai…
Job Description McCarthy Tétrault is a leading Canadian law firm offering a full suite of legal and business solutions to clients in Canada and around the world. With offices in Toronto, Montréal, Québec City, Calgary an…
Work Arrangement: Hybrid Department: LVP Logistics Area Pembina Pipeline Corporation is a dynamic energy transportation and midstream provider, serving customers for more than 65 years. Chances are, we do more than you t…
Who we are At Rocky, we feel our best in nature and we feel our best when we nurture ourselves with nature. That's why for over 25 years we've been students of this glorious Earth — formulating everyday essentials that n…
Skills: Retail Leadership, Customer Service, Sales, Team Training, Inventory Management
Come Build Your Career at Aecon! Aecon delivers some of the most complex and impactful infrastructure projects — from transformative transportation networks to critical energy, industrial and nuclear programs. The projec…
Skills: Project Coordination, Field Engineering, Cost Coding, Quality Assurance, Scheduling
Schedule: Monday to Friday: 5:00am - 1:00pm (Hybrid) The Bilingual Fleet Maintenance Coordinator is responsible for coordinating and executing maintenance and repair activities for fleet assets, ensuring compliance, mini…
Skills: Bilingual French and English, Fleet Maintenance Coordination, Vendor Management, Purchase Order Management, Preventive Maintenance Scheduling
RWC is a leading commercial drywall and steel stud contractor with operations across Western Canada. For over 45 years, we have built a reputation for delivering high-quality construction projects while maintaining a str…
Skills: Health and Safety Management, Regulatory Compliance, Incident Investigation, WCB Alberta Regulations, COR Audit Certification
At Onsite Sign Group Inc., we’re leaders in professional sign installation services across Alberta and Saskatchewan. Our mission is to deliver safe, high-quality signage solutions that stand the test of time. As we conti…
Date Posted: 2026-06-17 Country: Canada Location: CA-AB-CALGARY-111 ~ 919 72nd Ave NE ~ 72ND AVE, Ste A Position Role Type: Unspecified We are currently seeking a detail oriented Financial Analyst for our Calgary, Albert…
Location: 116-10725 25 Street NE, Calgary, Alberta, T3N 0A4 At Shoppers Drug Mart, we’re innovating health and wellness in Canada. From prescriptions to walk-in clinics, and a beloved loyalty program, we’re caring and su…
Part Time Sales Representative | Southcentre Mall-KOODO
Calgary, Alberta, Canada · On-site
Entry level
Description What does it mean to join our TELUS family? Our goal is to provide Canadians with an excellent experience, by connecting with our customers and meeting all their needs under one roof We are passionate about p…
Here’s your chance to be a part of our story! Carewest is one of Calgary’s leaders in exceptional care and we are looking for passionate helpers to join our team. At Carewest, our mission is to support all clients in mai…
Skills: Clinical Leadership, Nursing Practice, Change Management, Research Design, Program Evaluation
The role – what you’ll do Barr is seeking a process engineer to join our team. In this hybrid/remote role, you will support multidisciplinary project teams within our process engineering practice group on mineral and che…
Skills: Process Design, Mass And Energy Balance Modeling, PFD Development, P&ID Development, Technical Reporting
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better wor…
Skills: U.S. Business Immigration, Legal Research, Document Drafting, Case Management, Client Communication
Foreman/Forewoman Civil Construction At Golderado, the work we do is built by the people on our sites every day. We're looking for skilled, hardworking tradespeople who take pride in their craft, look out for their crew,…
Skills: Heavy Equipment Operation, Civil Construction Supervision, Safety Planning, Excavating, Backfilling
Retail Sales Consultant - Full Time - Chinook Centre, AB
Calgary, Alberta, Canada · On-site
Entry level$629M raised
At Swarovski, your ideas are valued, and your work helps create unforgettable moments for our customers every day. Ready to bring brilliance to life with one of the most iconic brands in fashion and design? Join our reta…
Job Information Job Title: Senior Platform Services Analyst & Platform Services Analyst Job Requisition ID: 84643 Ministry: Technology and Innovation Location: Greater Edmonton or Calgary Area (Remote) Full or Part-Time:…
At Mott MacDonald, we trust our brilliant people to do brilliant things in engineering, management, and development services, supporting multisector project work in over 150 countries. As one of the largest employee-owne…
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Full-time
Posted 50d ago
Apply by Sep 15
~40 hrs/week
Remote in Calgary, Alberta, Canada
Responsibilities
Lead the application security program by defining roadmaps, managing a team of security developers, and overseeing compliance for PCI, GDPR, and SOC2. Responsible for conducting security reviews, threat modelling, and managing incident response and vulnerability remediation across the tech stack.
Requirements
Requires 8+ years of development experience with at least 3 years in security-focused roles and demonstrated people management experience. Must possess strong technical skills in Ruby on Rails, React/React Native, and AWS security, along with deep knowledge of OWASP and API security patterns.
Full job description
Staff Developer / Development Manager, Application Security
Reports To: Director of Development, Architecture Location: Calgary or Remote
About the Job: When this company started, it was just a few of us furiously working to find product-market fit, and as with many startups, technical debt accumulated. Ten years later, we've found that market fit. We're revenue positive, our customers love us, and with that growth has come new responsibility.
PCI Level 1 became a requirement to do business, and we've achieved SOC 2 compliance — certifications we must maintain, along with our reputation and our commitment to our customers. While we have achieved a higher profile, an explosion of new penetration tools and techniques have emerged; we can no longer fly under the radar.
While we work hard to improve our security, those efforts must be balanced against business and customer needs. We need people who can identify security concerns, prioritize them, and build solutions — all while understanding the ripple effects those changes will have across the business. While establishing a solid security posture, we want to proactively find and remediate issues before they are discovered for us and create a security-first SDLC within the company.
Our Tech Stack:
Front End: React Native, React, JavaScript
Backend: Ruby on Rails, GraphQL, PostgreSQL, Redis, CouchDB
Cloud Platform: AWS
Tools: GitHub, Sidekiq, Docker
What You’ll Do: Security at atVenu spans the codebase, the compliance program, and the team culture. You'll be part of all of it.
Application security program leadership: Define the roadmap, own application security risks, and make the case to engineering and executive leadership for what gets resourced and when. You know when to accept calculated risk and when to hold the line — your decisions are pragmatic and reflect thought towards the needs of our business, our customers and compliance.
Team management: Hire, develop, and retain application security developers. Set technical direction, run code and architecture reviews, unblock your team, and build a security culture that scales across a fast-moving engineering organization without becoming a bottleneck.
PCI, GDPR, and SOC2 ownership within the SDLC: Maintain and reduce cardholder data environment (CDE) scope across our Rails API, GraphQL layer, PostgreSQL, and mobile POS app. Own the SOC2 and PCI DSS controls within our software development lifecycle.
Offline payment security: Our React Native POS runs without connectivity during events and syncs payment data on reconnect. You'll direct the audit and hardening of encryption, key management, and CouchDB sync pipeline — a non-trivial challenge when card data lives on-device before it reaches our Rails API.
Release security reviews: Ensure GraphQL API changes are reviewed for injection risks, IDOR vulnerabilities, and over-exposed tenant data before they reach 500+ venues. Own the SAST/DAST integration in our GitHub CI pipeline and set the bar for what ships.
Vulnerability and CVE triage: Lead risk-ranked remediation across our Rails/Redis/PostgreSQL/CouchDB stack. Live events don't pause for maintenance windows — your team needs a clear, fast process for deciding what gets patched and when.
Threat modelling and architecture review: Embed threat modelling into product development for new features — mobile ordering flows, vendor integrations, new hardware platforms. Your team challenges assumptions before code ships.
Incident response: Be one of the application-layer authorities when something goes wrong at an event. Lead forensics, remediation, and post-mortems in collaboration with Engineering and Compliance.
What You’ll Bring:
8+ years of development experience with at least 3 years in security-focused roles or responsibilities, plus demonstrated people management experience.
Experience building or maturing an application security program — roadmap ownership, risk prioritization, and cross-functional alignment with Engineering, Compliance, and Product.
Strong Ruby on Rails and React/React Native skills — you write and review production code, not just run scanners, and you've earned the kind of technical credibility that makes engineers actually listen when you make a point. Devs want to learn from you!
Proven ability to communicate security risk to both technical and non-technical audiences and get organizational buy-in without resorting to fear or alarmism.
Deep knowledge of OWASP Top 10 (web and mobile), API security patterns, and common authentication/authorization flaws.
Nice to Have:
Experience and interest with AI tooling; you know when to use it and when to go old school.
Experience in the payment, retail and e-commerce space.
Experience with PCI, GDPR and/or SOC2 compliance in a production SaaS environment; deep knowledge of compliance and privacy management across North America and Europe.
Related keywords
Ruby on RailsReactReact NativeJavaScriptGraphQLPostgreSQLRedisCouchDBAWSGitHubSidekiqDockerPCI Level 1SOC 2GDPROWASP Top 10
The Leading Live Event Point Of Sale Platform Built To Maximize Revenue, Reduce Lines, & Provide Real-Time Sales Insight
Industry
Software Development
Company size
51-200 employees
Founded
2012
Headquarters
San Clemente, California
LinkedIn followers
5,045
Total funding
$161M
atVenu is the world’s leading Live Event Commerce platform for live events. Continuously building and enhancing features designed for maximizing revenue, dynamically adjusting your sales footprint to meet the needs of your event, and making it easier to setup, manage, and monitor sales in real-time. atVenu's platform is used at over 125,000 events each year and trusted by some of the largest companies in the industry.
We're built to quickly deploy, take all forms of payment including RFID and promotions both online and 100% offline, along with concierge service capabilities and mobile ordering.
Our technology combines an advanced backend system specifically built to handle the unique challenges of running live events with a seamless front-end point of sale with mobile order purchasing.
Don't trust us? Ask one of our customers.
Offices: 1060 Calle Cordillera, San Clemente, California 92673, US · 1001 Bridgeway Blvd, #459, Sausalito, CA 94965, US · Calgary, Alberta AB T2N 1Z6, CA
Merchandise Managementcomputer softwarevenuesfestivalslive eventspoint of salestadiumsfood & beveragesporting eventspop-up events