Senior Application Security Engineer (SCA/SAST)

About the role

Trimble is hiring a Senior Application Security Engineer (SCA/SAST) for a fully remote position in Canada. The role leads open-source security (SCA) and static analysis (SAST) across a global footprint, shaping a security strategy that affects 99% of engineering teams and integrating security directly into CI/CD pipelines.

Key responsibilities

• Act as the global subject matter expert for SCA and SAST, turning complex security requirements into scalable, automated solutions.
• Optimize security tooling to be developer-first, reducing false positives.
• Shape the organizational approach to open-source security and license compliance.
• Embed security into the SDLC by working with architects and product owners worldwide.
• Build automation guardrails so developers can move fast without breaking things.
• Mentor new security talent and lead through influence across cross-functional teams.
• Evaluate emerging security technology and conduct threat modeling and architectural reviews.

Required profile

• 5+ years in application security with deep mastery of SCA and SAST at enterprise level.
• Bachelor's degree in Computer Science, Information Security or a related field, or equivalent practical experience.
• Ability to explain security risk in business terms to stakeholders and clear actions to engineers.

Required skills

• Knowledge of Java, C#, Python and Go, with the ability to read code and suggest remediation.
• Hands-on experience with GitHub Actions, Jenkins, Azure DevOps or GitLab CI.