Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

Senior Security Engineer

trimble196 open roles

Where
Canada - Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security Engineertrimble · Canada - Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on trimble's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

14.0% of postings close within 7 days. Measured by our own scanner across the market. trimble postings stay open a median of 25 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 14.0%7 days
  4. 22.5%14 days
  5. 38.3%30 days
  6. 59.0%60 days
This job: posted today

trimble median: 25 days open

The posting

Lead Dynamic & Runtime Application Security as Our Next Senior Security Engineer!

Are you ready to own dynamic and runtime security across a massive, multi-product enterprise software portfolio? Join our global Application Security team to scale automated defenses, protect cutting-edge AI and API architectures, and empower dozens of engineering teams to build resilient, cloud-native solutions for the AI era!

About Us:

Trimble is an industrial technology company transforming the way the world works by delivering solutions that enable our customers to thrive. We create technologies that connect the digital and physical worlds, helping our customers increase productivity, quality, safety, and sustainability. From purpose-built products to enterprise-level solutions, our technology empowers professionals in construction, geospatial, government, transportation, and more.

Corporate:

Trimble is a global technology company that connects the physical and digital worlds, transforming the ways work gets done. With relentless innovation in precise positioning, modeling and data analytics, Trimble enables essential industries including construction, geospatial and transportation. Whether it's helping customers build and maintain infrastructure, design and construct buildings, optimize global supply chains or map the world, Trimble is at the forefront, driving productivity and progress. For more information about Trimble (Nasdaq:TRMB), visit: www.trimble.com.

What Makes This Role Great:

In this high-impact senior role, you will take complete ownership of the Dynamic & Runtime Security pillar within our global Application Security program. You will directly influence how dozens of engineering teams secure complex APIs, modern cloud architectures, and emerging AI/LLM implementations while shaping our multi-year strategy for automated runtime defense.

Key Exciting Responsibilities

• Own the end-to-end execution, expansion, and optimization of enterprise DAST, IAST, API Security, and Runtime Security solutions across a multi-product portfolio.

• Establish proactive API discovery, continuous posture management, and runtime security controls while driving security initiatives for AI/LLM implementations.

• Synthesize signals across DAST, IAST, SAST, SCA, and runtime telemetry to eliminate noise and empower developers with high-fidelity, actionable risk prioritization.

• Partner with AppSec peers to integrate dynamic security automation seamlessly into CI/CD pipelines alongside SAST, SCA, Container, and IaC security tooling.

• Act as a strategic security advisor to engineering, DevOps, and product teams to modernize runtime protection across diverse technology stacks and cloud environments.

Essential Skills & Experience

• 6+ years of dedicated experience in Application Security, Product Security, or Software Security Engineering within complex enterprise environments.

• Hands-on mastery with enterprise-grade DAST and IAST platforms (such as Burp Suite Enterprise, Rapid7, Veracode DAST, Contrast Security, or HCL AppScan).

• Deep understanding of API security testing (REST, GraphQL, gRPC), API gateways, and runtime defense models (RASP, eBPF monitoring, WAF/WAAP). • Proven track record securing multi-language applications (Java, Python, Go, Node.js, C#/.NET, C++) and automating scans within modern CI/CD workflows and cloud environments (AWS, Azure, GCP).

• Strong grasp of vulnerability scoring and risk prioritization frameworks including CVSS v3/v4, EPSS, and OWASP Top 10.

Bonus Points For:

• Hands-on experience securing AI-enabled applications, LLM wrappers, and APIs against OWASP LLM Top 10 threat vectors.

• Familiarity with neighboring AppSec domains including SAST, SCA, Container Security, and Infrastructure-as-Code scanning.

• Software engineering background with the ability to write custom automation scripts (Python, Go, Bash) and review multi-language source code.

• Relevant industry certifications such as OSCP, OSWE, GWAPT, CISSP, AWS Certified Security Specialty, or CKS.

Logistics:

Location: Canada, Remote

Travel Requirement: 0-10%

Why You'll Love Working With Us

At Trimble, we're not just a company that "does good"—we are a team dedicated to making a tangible, positive Real-World Impact.

We build innovative solutions designed to solve the world's most critical challenges. From construction sites to transportation hubs, our work tangibly improves how people live, build, move, and grow.

• You'll work on projects that truly matter: Our purpose-driven culture means you'll be helping to build and deliver solutions that make work faster, safer, and more sustainable for millions of people worldwide. Our impact is tangible, from connected machines that save fuel to data-driven insights that reduce waste.

• Collaborate with like-minded people: Our strong internal culture is a "hidden gem." You will work with a collaborative, supportive team that shares your purpose and fosters a genuine sense of belonging. We're a company of "visionary pragmatists" who think boldly and build things that work.

• Be an owner: Trimble thrives on individuals who take initiative and embrace ownership. You'll find an entrepreneurial spirit where success is often "self-authored," empowering proactive "doers."

Senior Security Engineer, Application Security, AppSec, Dynamic Security, DAST, IAST, Runtime Security, API Security, AI Security, DevSecOps, Remote Canada Jobs

How to Apply: Please submit an online application for this position by clicking on one of the Apply buttons located in this posting.

Join a Values-Driven Team: Belong, Grow, Innovate.

At Trimble, our core values of Belong, Grow, and Innovate aren't just words—they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter.

Candidate Privacy Notices by Country

If you need assistance or would like to request an accommodation in connection with the application process, please contact [email protected].

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against trimble's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on trimble's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    trimble's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.