Java web developer • calgary ab
At Suncor, we produce and provide energy.When you join Suncor, you become part of a company that has built a solid foundation for both business and employee success.We are a place where talented pe... Voir plus
The Job Developer (JD) works with a wide variety of local employers on behalf of clients to place them in employment opportunities.The JD provides employers with information, specifically, the adva... Voir plus
Our energy & resources client is seeking a.Full Stack Java Developer II (5+ years of experience) to develop and maintain enterprise-level applications using Java, Spring Boot, Vaadin, CSS, and Hibe... Voir plus
Construct, enhance and troubleshoot native Android apps in an Agile, collaborative environment.Implement complex new features and functionality.Work closely with developers, designers and our busin... Voir plus
At Graham, one of North America’s largest general contractors, we don’t just build projects, we enable the systems and services that make construction possible.As part of our Corporate Services tea... Voir plus
Calgary (Rocky View County), AB.Build Software That Powers a National Business.At PTW Energy Services, you'll build software that supports thousands of employees and helps drive operations across C... Voir plus
Construct, enhance and troubleshoot native Android apps in an Agile, collaborative environment.Implement complex new features and functionality.Work closely with developers, designers and our busin... Voir plus
Application Integration Developer.Duration: 8 Months with Possible Extension</b></p> <p><b> Location</b>: C<b>algary, </b><b>Hybrid</b>, <... Voir plus
We are seeking a Senior iOS Developer who is passionate about great software and motivated to make a huge impact with our mobile development.We are excited about candidates who are creative, innova... Voir plus
Key Responsibilities and Requirements:.Java (Spring Boot), microservices, and other open-source technologies.Hands-on knowledge of multithreaded applications (must-have).Excellent design skills, in... Voir plus
Location: Calgary, Alberta (3 days onsite in a week from day one).JAVA (Spring Boot), Microservices and other open-source technologies.Hands on knowledge of working on Multithreaded application (Mu... Voir plus
We're looking for a Salesforce Developer with strong Financial Services Cloud experience to join a technology team in Calgary.The ideal candidate brings solid Apex and Lightning Web Components... Voir plus
Our consumer business client is seeking a.Senior Applications Developer (10+ years) to build and maintain web solutions using Adobe Experience Manager (AEM).Join a development team delivering scala... Voir plus
We’re looking for an enthusiastic Software Developer who’s excited by the opportunity to work on challenging problems at the intersection of.As a Software Engineer, you’ll be responsible for archit... Voir plus
You’re an expert at making sure websites, storefronts, and backend systems work smoothly before they go live.You build the systems that catch bugs before anyone else ever sees them.You can spot fla... Voir plus
We are looking for the right people — people who want to innovate, achieve, grow and lead.We attract and retain the best talent by investing in our employees and empowering them to develop themselv... Voir plus
We’re seeking someone to join our team as a Software Developer in Wealth Management Technology to work on our mobile services platform.In the Technology division, we leverage innovation to build th... Voir plus
Job Title : Java Developer </b><br /> <br /> <b>Job Location:- Calgary, Alberta Canada</b></p> <p><b>Job Type : Fulltime</b></p> <p>... Voir plus
As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation.For more information, please visit.Sunoco LP is a leading energy infrastructure and fuel distrib... Voir plus
At General Dynamics Mission Systems–Canada, we’re not just engineering technology — we’re shaping the future of defence and security.Our teams design and deliver advanced, mission-critical solution... Voir plus
At Suncor, we produce and provide energy.
When you join Suncor, you become part of a company that has built a solid foundation for both business and employee success. We are a place where talented people thrive. As part of our team, you play a vital role in delivering energy we all rely on, and you'll make a meaningful impact in the communities where we live and work.
We are seeking a hands-on Web Application Pentester who is passionate about working directly with developers to eliminate vulnerabilities at the source. Sitting within our Cyber Defense organization, you will find, explain, and help fix security weaknesses in the applications and APIs that run our business, with periodic opportunities to join red and purple team engagements.
What we offer:
We recognize your contribution and offer a range of rewards and development opportunities designed to support your success. Benefits/perks listed below may vary depending on the nature of your employment with Suncor and the region where you work.
Strong compensation: we offer competitive compensation, regional-based uplifts, annual bonuses, and long-term financial rewards. We also help you save for your future by offering pension programs, and savings plans with company matching
Benefits: utilize an employee assistance program and comprehensive company-paid health, dental, and vision benefits for you and your family to support your mental, physical, and financial well-being
Generous time-off: enjoy generous paid vacation time and personal time-off to recharge and maintain a healthy work-life balance
Talent development programs: Internal mobility, succession planning, and employee training and development programs are just a few ways we’re dedicated to your development
Minimum Requirements:
7+ years in cybersecurity, including 5+ years of hands-on manual testing of modern web applications and APIs
Bachelor's degree in cyber security, information technology, computer science, or a related field
Demonstrated experience working directly with development teams to drive remediation and secure design decisions
Hands-on skill with Burp Suite or equivalent, REST and microservice API testing, threat modelling, and secure code review in Java, .NET, or JavaScript/TypeScript
Strong grounding in OWASP Top 10, ASVS, and the Cheat Sheet Series; SDLC and DevSecOps practices; server-side authorization and IAM; and modern authentication protocols (OAuth 2.0, OIDC, SAML)
Excellent written and verbal communication, with the ability to explain risk to both engineers and executives
Experience supporting red or purple team engagements, securing OT/ICS environments, or leveraging AI to enhance secure code review, threat modelling, and vulnerability discovery is considered a strong asset
Don’t have all the qualifications listed? That’s ok! Apply anyway. We acknowledge the value of transferable skills.
Responsibilities:
Plan and execute manual penetration tests against web applications and APIs, surfacing business logic flaws, broken access control, injection, and authentication and session weaknesses aligned to OWASP Top 10 and ASVS
Build safe proof-of-concept exploits that demonstrate real impact without disrupting operations, and retest fixes to confirm they hold
Test authentication and authorization implementations, including OAuth 2.0, OIDC, SAML, and token-based API access
Lead secure design reviews, threat modelling sessions, and source code reviews, recommending secure patterns and reusable controls
Partner with development teams to triage findings, agree on practical fixes, and coach secure development practices across the SDLC
Support pipeline security tooling (SAST, DAST, SCA, and Infrastructure-as-Code scanning) and help teams tune out noise
Contribute application-layer attack paths to red team campaigns and purple team exercises with SOC and detection engineering
Produce reports that pair developer-ready detail with concise executive impact summaries, and translate findings into actionable backlog items with reproduction steps, severity, and acceptance criteria
Location and other Key Details:
This is an office-based role. You will work out of our Calgary head office, located in the Suncor Energy Centre at 150 – 6th Ave S.W
Hours of work are a regular 40-hour work week, Monday to Friday with occasional site visits
Our business professional roles follow internal compensation guidelines, and the pay band will generally be based on years of experience and scope of work
Think we are a fit? Apply now!
Suncor is committed to providing equal opportunities for employment and building an inclusive, results-oriented and high-performance culture where all members of our team feel safe, valued and respected.
