- Where you can work from
- Remote — Canada onlyCanada
- Salary
- Salary not disclosedThe employer did not publish a range. We do not estimate one.
- Job type
- Full-time
- Experience
- Mid level
See more from us in Google Search — add us as a preferred source.
Opens himalayas.app in a new tab. No account needed.
via Himalayas · Himalayas
Job description
Who we are.
Newfold Digital is a leading web technology company serving millions of customers globally. Our customers know us through our robust portfolio of brands. We have some of the industry's most prominent and storied go-to-market brands, including Bluehost, HostGator, Domain.com, Network Solutions, Register.com and Web.com. We help customers of all sizes build a digital presence that delivers results. With our extensive product offerings and personalized support, we take pride in collaborating with our customers to serve their online presence needs. The strength of our company lives in the intersection of our people, our customers, and our brands.
We're looking for an application security engineer to help run and scale our day-to-day AppSec program. You will help us on our journey to operating our scanning tools, triaging findings, and working directly with engineering teams to get vulnerabilities fixed.
What you'll do & how you'll make your mark.
- Operate and maintain AppSec scanning tools (SAST, SCA, secrets scanning, container scanning) across the SDLC
- Triage findings, validate true positives, and prioritize remediation with engineering teams
- Track vulnerabilities through to closure and monitor SLA compliance
- Support onboarding of new repositories/services into the security tooling
- Contribute to internal documentation, runbooks, and process improvements
- Assist with basic scripting/automation tasks under guidance from senior team members
Who you are & what you'll need to succeed.
- 2–4 years in application security, security engineering, or a related software/QA engineering role
- Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices
- Basic scripting ability (Python preferred) for automating repetitive tasks
- Comfortable communicating findings clearly to developers
- Strong attention to detail and ability to manage a queue of findings across multiple tools
Nice to have
- Exposure to Defect Dojo, Dependency-Track, Truffle Hog, Trivy, and/or Semgrep
- Familiarity with CI/CD pipelines and how security scans plug into them
- Interest in growing into tool integration, automation, or custom rule-writing over time
Why you'll love us.
- Work-life balance. Our work is thrilling and meaningful, but we know balance is key to living well.
- We celebrate one another’s differences. We’re proud of our culture of diversity and inclusion. We foster a culture of belonging. Our company and customers benefit when employees bring their authentic selves to work. We have programs that bring us together on important issues and provide learning and development opportunities for all employees. We have 20 + affinity groups where you can network and connect with Newfolders globally.
- We care about you. We are a family, and we care about you and your family’s physical and mental health by providing competitive HMO benefits – 175k MBL with one free dependent upon one year of service! We also give out Punctuality Bonus, Generous Vacation policy, and much more!
- Where can we take you? We’re fans of helping our employees learn different aspects of the business, be challenged with new tasks, be mentored, and grow their careers. Unfold new possibilities with #teamnewfold!
Originally posted on Himalayas
Opens himalayas.app in a new tab. No account needed.
via Himalayas · Himalayas
Job availability & source
Still listed on the employer's own board at our last check, 6 hours ago
This job was originally posted by the employer or source shown below. We re-check the original listing regularly to keep its availability current, and send you straight to it to apply — we never sit in between.
- Source
- Himalayas
- Posted by the employer
- 24 Oct 2026
- First seen by us
- 24 Oct 2026
- Last checked
- 24 Oct 2026
via Himalayas — view on source
Similar remote jobs
Security Engineer, Application Security
QuartermasterLast weekUnited StatesMid levelSoftware DevelopmentAWSAzureC++Application Security Engineer
Very Good SecurityLast weekCA · USUSD 175K–230K / yearMid levelSoftware DevelopmentAWSCI/CDJavaApplication Security Engineer AppSec
BjakLast weekUnited KingdomMid levelSoftware DevelopmentAWSCI/CDGoogle CloudApplication Security Engineer II
Abnormal Security2 weeks agoUnited StatesUSD 130K–187K / yearMid levelSoftware DevelopmentAWSCI/CDDockerApplication Security Engineer
NewTripleTenPosted 22 hours agoLocation not statedEUR 4,000–6,000 / monthSeniorSoftware DevelopmentAWSCI/CDIAMApplication Security Engineer (West Coast)
Black Duck Software, Inc.Last weekUnited StatesUSD 136K–204K / yearMid levelSoftware DevelopmentC#C++CI/CDApplication Security Engineer
Intermedia Intelligent CommunicationsLast weekUnited KingdomUSD 60K–80K / yearMid levelSoftware DevelopmentAWSAzureDockerSenior Application Security Engineer
NewNew BalancePosted 7 hours agoUnited StatesUSD 105K–156K / yearSeniorSoftware DevelopmentAWSAzureCI/CD
More jobs at Newfold Digital
Product Manager Sênior - Hosting
NewNewfold DigitalPosted 19 hours agoBrazilSeniorProductDockerGoogle AdsSoftware Engineer
NewNewfold DigitalYesterdayCanadaMid levelSoftware DevelopmentJavaAngularAWSSenior Product Manager, Shared Hosting
Newfold Digital2 days agoUnited StatesUSD 140K–170K / yearSeniorProductEmail MarketingAccount Services II
Newfold Digital2 days agoCanadaMid levelCustomer SupportExcelAssociate Sales
Newfold DigitalLast weekIndiaEntry levelSales & MarketingPrincipal Product Manager, Agentic Experiences
Newfold DigitalLast weekUnited StatesUSD 150K–190K / yearSeniorProduct