Application Security Engineer/Developer

Marsh McLennan•Toronto, ON

2d•Hybrid

About The Position

Marsh Information Security team is seeking candidates for the position of Application Security Engineer/Developer. This role will act as a security advisor to various teams across Marsh, and will also develop code samples and prototypes. The Application Security Engineer/Developer will review projects for security weaknesses, risks, and vulnerabilities, and stay at the forefront of new security controls, technology trends, and emerging threats. They will create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews. This role requires collaboration with various Marsh technology organizations and the ability to quickly "dive" into new projects to provide security expertise and support.

Requirements

Passion for Information Security and problem solving.
Experience with microservices, Kubernetes, and cloud technologies.
Proficiency in building and using APIs, scripts, and applications, preferably in Python.
Strong understanding of authentication methods, protocols, and Application Security fundamentals.
Experience with Security by Design frameworks, Threat Modeling, and Secure SDLC.
Good understanding of cryptography, encryption and digital signature.

Nice To Haves

Experience in securing LLM-based applications and AI agents, including RAGs.
Knowledge of Federation, SAML, and OAuth protocols.
Ability to quickly absorb new technologies and write position papers.

Responsibilities

Serve as a security advisor to various teams across Marsh.
Review projects for security weaknesses, risks, and vulnerabilities.
Stay at the forefront of new security controls, technology trends, and emerging threats.
Create or update application security best practices and develop code samples, prototypes, and tools to enhance the depth of security reviews.
Collaborate with various Marsh technology organizations.
Quickly “dive” into new projects to provide security expertise and support.