Software Development Engineer, Security - Evisort

Workday•Vancouver, BC

1d•CA$112,000 - CA$168,000•Hybrid

About The Position

The Evisort Security team is expanding and looking for a security software engineer to join our team. We’re a hands-on security engineering team focused on building security software and enabling secure development across the stack. From building security tools, securing our AI agent infrastructure, we embed security into every phase of the SDLC. Our work spans cloud security, application security, AI security, runtime security, and ensuring alignment with compliance frameworks like SOC 2 and ISO 27001. We partner closely with engineering to drive practical, scalable security solutions that support rapid innovation. As a security software engineer, you will work closely with DevOps, Security, and Development teams to ensure security is baked into our systems.

Requirements

5+ years of experience in software engineering focused on security or building security applications.
3+ years experience with Python and Python web development framework (FastAPI, Flask, Or Django).
3+ years experience with cloud platforms (e.g., AWS, GCP) and containerization technologies (e.g., Docker, Kubernetes).
BS or MS degree in Computer Science, Engineering, or equivalent job experience.

Nice To Haves

Familiarity with AI security concepts.
Experience with building AI
Proficiency in security tools (e.g., Snyk, Semgrep, Contrast, Wiz).
Familiarity with infrastructure as code (IaC) tools (e.g., Terraform, Cloudformation, Ansible).
Full-stack generalist.
Proficient in database systems (Postgres, DynamoDB, Redis, Pinecone)
Strong understanding and practical application of modern software development practices, working with DevOps, automated testing, and observability
Understanding of network and application security threats, attack techniques, and mitigation options.
Experience with incident response.

Responsibilities

Design and build security products that empower the entire Workday AI organization.
Integrate security at every stage of the software development lifecycle (SDLC) and deployment pipelines.
Partner with engineering and platform teams to implement security-by-design and shift-left security practices.
Patch vulnerable dependencies
Design and build security products that support and protect the broader organization
Manage the end-to-end vulnerability management lifecycle, including discovery, assessment, prioritization, remediation, and reporting.