Senior Security Engineer

Lead Dynamic & Runtime Application Security as Our Next Senior Security Engineer!

Are you ready to own dynamic and runtime security across a massive, multi-product enterprise software portfolio? Join our global Application Security team to scale automated defenses, protect cutting-edge AI and API architectures, and empower dozens of engineering teams to build resilient, cloud-native solutions for the AI era!

About Us:

Trimble is an industrial technology company transforming the way the world works by delivering solutions that enable our customers to thrive. We create technologies that connect the digital and physical worlds, helping our customers increase productivity, quality, safety, and sustainability. From purpose-built products to enterprise-level solutions, our technology empowers professionals in construction, geospatial, government, transportation, and more.

Corporate:

Trimble is a global technology company that connects the physical and digital worlds, transforming the ways work gets done. With relentless innovation in precise positioning, modeling and data analytics, Trimble enables essential industries including construction, geospatial and transportation. Whether it's helping customers build and maintain infrastructure, design and construct buildings, optimize global supply chains or map the world, Trimble is at the forefront, driving productivity and progress. For more information about Trimble (Nasdaq:TRMB), visit: www.trimble.com.

What Makes This Role Great:

In this high-impact senior role, you will take complete ownership of the Dynamic & Runtime Security pillar within our global Application Security program. You will directly influence how dozens of engineering teams secure complex APIs, modern cloud architectures, and emerging AI/LLM implementations while shaping our multi-year strategy for automated runtime defense.

Key Exciting Responsibilities

• Own the end-to-end execution, expansion, and optimization of enterprise DAST, IAST, API Security, and Runtime Security solutions across a multi-product portfolio.

• Establish proactive API discovery, continuous posture management, and runtime security controls while driving security initiatives for AI/LLM implementations.

• Synthesize signals across DAST, IAST, SAST, SCA, and runtime telemetry to eliminate noise and empower developers with high-fidelity, actionable risk prioritization.

• Partner with AppSec peers to integrate dynamic security automation seamlessly into CI/CD pipelines alongside SAST, SCA, Container, and IaC security tooling.

• Act as a strategic security advisor to engineering, DevOps, and product teams to modernize runtime protection across diverse technology stacks and cloud environments.

Essential Skills & Experience

• 6+ years of dedicated experience in Application Security, Product Security, or Software Security Engineering within complex enterprise environments.

• Hands-on mastery with enterprise-grade DAST and IAST platforms (such as Burp Suite Enterprise, Rapid7, Veracode DAST, Contrast Security, or HCL AppScan).

• Deep understanding of API security testing (REST, GraphQL, gRPC), API gateways, and runtime defense models (RASP, eBPF monitoring, WAF/WAAP). • Proven track record securing multi-language applications (Java, Python, Go, Node.js, C#/.NET, C++) and automating scans within modern CI/CD workflows and cloud environments (AWS, Azure, GCP).

• Strong grasp of vulnerability scoring and risk prioritization frameworks including CVSS v3/v4, EPSS, and OWASP Top 10.

Bonus Points For:

• Hands-on experience securing AI-enabled applications, LLM wrappers, and APIs against OWASP LLM Top 10 threat vectors.

• Familiarity with neighboring AppSec domains including SAST, SCA, Container Security, and Infrastructure-as-Code scanning.

• Software engineering background with the ability to write custom automation scripts (Python, Go, Bash) and review multi-language source code.

• Relevant industry certifications such as OSCP, OSWE, GWAPT, CISSP, AWS Certified Security Specialty, or CKS.

Logistics:

Location: Canada, Remote

Travel Requirement: 0-10%

Why You'll Love Working With Us

At Trimble, we're not just a company that "does good"—we are a team dedicated to making a tangible, positive Real-World Impact.

We build innovative solutions designed to solve the world's most critical challenges. From construction sites to transportation hubs, our work tangibly improves how people live, build, move, and grow.

• You'll work on projects that truly matter: Our purpose-driven culture means you'll be helping to build and deliver solutions that make work faster, safer, and more sustainable for millions of people worldwide. Our impact is tangible, from connected machines that save fuel to data-driven insights that reduce waste.

• Collaborate with like-minded people: Our strong internal culture is a "hidden gem." You will work with a collaborative, supportive team that shares your purpose and fosters a genuine sense of belonging. We're a company of "visionary pragmatists" who think boldly and build things that work.

• Be an owner: Trimble thrives on individuals who take initiative and embrace ownership. You'll find an entrepreneurial spirit where success is often "self-authored," empowering proactive "doers."

Senior Security Engineer, Application Security, AppSec, Dynamic Security, DAST, IAST, Runtime Security, API Security, AI Security, DevSecOps, Remote Canada Jobs

How to Apply: Please submit an online application for this position by clicking on one of the Apply buttons located in this posting.

Join a Values-Driven Team: Belong, Grow, Innovate. 

At Trimble, our core values of Belong, Grow, and Innovate aren't just words—they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter.

Candidate Privacy Notices by Country