Application Security Automation Engineer

Application Security Automation Engineer

Hybrid work model - 2 days/week in office The Application Security Automation Engineer reports to the Senior Manager of automated security testing team and supports security testing activities for BMO applications. This role is responsible for leading and maturing the bank’s static application security testing (SAST) capabilities and partnering with application teams to reduce risk through secure coding practices, actionable findings, and integrated controls across the SDLC. Liaises with stakeholders to understand problems and opportunities and enables BMO to meet its goals by understanding business vision, objectives and KPIs. Participates in the execution of information security strategy.

Application Security Testing

• Lead end-to-end SAST operations, including intake/scoping, onboarding, configuration, execution, triage, and reporting across diverse technology stacks.
• Tune scan tools to ...