Web developer • calgary ab
At Suncor, we produce and provide energy.When you join Suncor, you become part of a company that has built a solid foundation for both business and employee success.We are a place where talented pe... Voir plus
As part of the integration of the technology stacks with the ones from our Company, we are looking to harmonize our development practices so as to offer a unified developer experience.This starts b... Voir plus
Infosys is seeking a IOS Developer.This position will interface with key stakeholders and apply technical proficiency across different stages of the Software Development Life Cycle including Requir... Voir plus
At Graham, one of North America’s largest general contractors, we don’t just build projects, we enable the systems and services that make construction possible.As part of our Corporate Services tea... Voir plus
As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation.For more information, please visit.Sunoco LP is a leading energy infrastructure and fuel distrib... Voir plus
Putting people first, every day.BDO is a firm built on a foundation of positive relationships with our people and our clients.Each day, our professionals provide exceptional service, helping client... Voir plus
We are strong, nimble, and growing! EB Horsman & Son is proud to be a fifth generation family owned, successful Western Canadian electrical distributor with 20+ locations throughout BC, Alberta... Voir plus
Key Responsibilities and Requirements:.Java (Spring Boot), microservices, and other open-source technologies.Hands-on knowledge of multithreaded applications (must-have).Excellent design skills, in... Voir plus
Location: Calgary, Alberta (3 days onsite in a week from day one).JAVA (Spring Boot), Microservices and other open-source technologies.Hands on knowledge of working on Multithreaded application (Mu... Voir plus
Location: Calgary, Alberta (3 days onsite in a week from day one).Core Java ,Microservices, Spring Boot , Multithreading, PL/SQL.JAVA (Spring Boot), Microservices.Hands on knowledge of working on M... Voir plus
Our client uses ServiceNow to support a variety of business processes and has implemented ITSM, IRM/GRC, and CSM.They are continuing to expand their ServiceNow capabilities, including additional CS... Voir plus
Mulesoft-based integration flows.Collaborate with data engineers on end-to-end pipeline design.Mulesoft Certified Developer/Architect.Experience with aviation-specific protocols (IATA NDC, Type B m... Voir plus
I'm working with a well-established and highly active developer that is continuing to expand itsmercial portfolio across North America.They are looking to add a Senior Development Manager who can t... Voir plus
We’re looking for an enthusiastic Software Developer who’s excited by the opportunity to work on challenging problems at the intersection of.As a Software Engineer, you’ll be responsible for archit... Voir plus
VCAD (Visual College of Art and Design) is an innovative college for creative applied arts and design education.We have nurtured artists and imaginative minds to pursue their creative passions.Our ... Voir plus
We are looking for the right people — people who want to innovate, achieve, grow and lead.We attract and retain the best talent by investing in our employees and empowering them to develop themselv... Voir plus
Senior ServiceNow Developer – ITSM, CSM & Finance/Accounts Payable Operations.We are seeking an experienced Senior ServiceNow Developer to design, build, configure, and support enterprise Servi... Voir plus
AI training project by creating reinforcement learning environments that evaluate AI models on complex software engineering tasks using.You will design reproducible environments, deterministic veri... Voir plus
APIs, and enterprise solutions.Design, develop, test, and maintain Java-based applications.Build scalable backend services using.RESTful APIs and Microservices.Troubleshoot and optimize application... Voir plus
As an ISV Account Manager you will have the exciting opportunity to help drive the growth and shape the future of an emerging technology.Your responsibilities will include driving revenue, adoption... Voir plus
At Suncor, we produce and provide energy.
When you join Suncor, you become part of a company that has built a solid foundation for both business and employee success. We are a place where talented people thrive. As part of our team, you play a vital role in delivering energy we all rely on, and you'll make a meaningful impact in the communities where we live and work.
We are seeking a hands-on Web Application Pentester who is passionate about working directly with developers to eliminate vulnerabilities at the source. Sitting within our Cyber Defense organization, you will find, explain, and help fix security weaknesses in the applications and APIs that run our business, with periodic opportunities to join red and purple team engagements.
What we offer:
We recognize your contribution and offer a range of rewards and development opportunities designed to support your success. Benefits/perks listed below may vary depending on the nature of your employment with Suncor and the region where you work.
Strong compensation: we offer competitive compensation, regional-based uplifts, annual bonuses, and long-term financial rewards. We also help you save for your future by offering pension programs, and savings plans with company matching
Benefits: utilize an employee assistance program and comprehensive company-paid health, dental, and vision benefits for you and your family to support your mental, physical, and financial well-being
Generous time-off: enjoy generous paid vacation time and personal time-off to recharge and maintain a healthy work-life balance
Talent development programs: Internal mobility, succession planning, and employee training and development programs are just a few ways we’re dedicated to your development
Minimum Requirements:
7+ years in cybersecurity, including 5+ years of hands-on manual testing of modern web applications and APIs
Bachelor's degree in cyber security, information technology, computer science, or a related field
Demonstrated experience working directly with development teams to drive remediation and secure design decisions
Hands-on skill with Burp Suite or equivalent, REST and microservice API testing, threat modelling, and secure code review in Java, .NET, or JavaScript/TypeScript
Strong grounding in OWASP Top 10, ASVS, and the Cheat Sheet Series; SDLC and DevSecOps practices; server-side authorization and IAM; and modern authentication protocols (OAuth 2.0, OIDC, SAML)
Excellent written and verbal communication, with the ability to explain risk to both engineers and executives
Experience supporting red or purple team engagements, securing OT/ICS environments, or leveraging AI to enhance secure code review, threat modelling, and vulnerability discovery is considered a strong asset
Don’t have all the qualifications listed? That’s ok! Apply anyway. We acknowledge the value of transferable skills.
Responsibilities:
Plan and execute manual penetration tests against web applications and APIs, surfacing business logic flaws, broken access control, injection, and authentication and session weaknesses aligned to OWASP Top 10 and ASVS
Build safe proof-of-concept exploits that demonstrate real impact without disrupting operations, and retest fixes to confirm they hold
Test authentication and authorization implementations, including OAuth 2.0, OIDC, SAML, and token-based API access
Lead secure design reviews, threat modelling sessions, and source code reviews, recommending secure patterns and reusable controls
Partner with development teams to triage findings, agree on practical fixes, and coach secure development practices across the SDLC
Support pipeline security tooling (SAST, DAST, SCA, and Infrastructure-as-Code scanning) and help teams tune out noise
Contribute application-layer attack paths to red team campaigns and purple team exercises with SOC and detection engineering
Produce reports that pair developer-ready detail with concise executive impact summaries, and translate findings into actionable backlog items with reproduction steps, severity, and acceptance criteria
Location and other Key Details:
This is an office-based role. You will work out of our Calgary head office, located in the Suncor Energy Centre at 150 – 6th Ave S.W
Hours of work are a regular 40-hour work week, Monday to Friday with occasional site visits
Our business professional roles follow internal compensation guidelines, and the pay band will generally be based on years of experience and scope of work
Think we are a fit? Apply now!
Suncor is committed to providing equal opportunities for employment and building an inclusive, results-oriented and high-performance culture where all members of our team feel safe, valued and respected.
