Lead Dynamic & Runtime Application Security as Our Next Senior Security Engineer!
Are you ready to own dynamic and runtime security across a massive, multi-product enterprise software portfolio? Join our global Application Security team to scale automated defenses, protect cutting-edge AI and API architectures, and empower dozens of engineering teams to build resilient, cloud-native solutions for the AI era!
About Us:
Trimble is an industrial technology company transforming the way the world works by delivering solutions that enable our customers to thrive. We create technologies that connect the digital and physical worlds, helping our customers increase productivity, quality, safety, and sustainability. From purpose-built products to enterprise-level solutions, our technology empowers professionals in construction, geospatial, government, transportation, and more.
Corporate:
Trimble is a global technology company that connects the physical and digital worlds, transforming the ways work gets done. With relentless innovation in precise positioning, modeling and data analytics, Trimble enables essential industries including construction, geospatial and transportation. Whether it's helping customers build and maintain infrastructure, design and construct buildings, optimize global supply chains or map the world, Trimble is at the forefront, driving productivity and progress. For more information about Trimble (Nasdaq:TRMB), visit: www.trimble.com.
What Makes This Role Great:
In this high-impact senior role, you will take complete ownership of the Dynamic & Runtime Security pillar within our global Application Security program. You will directly influence how dozens of engineering teams secure complex APIs, modern cloud architectures, and emerging AI/LLM implementations while shaping our multi-year strategy for automated runtime defense.
Key Exciting Responsibilities
• Own the end-to-end execution, expansion, and optimization of enterprise DAST, IAST, API Security, and Runtime Security solutions across a multi-product portfolio.
• Establish proactive API discovery, continuous posture management, and runtime security controls while driving security initiatives for AI/LLM implementations.
• Synthesize signals across DAST, IAST, SAST, SCA, and runtime telemetry to eliminate noise and empower developers with high-fidelity, actionable risk prioritization.
• Partner with AppSec peers to integrate dynamic security automation seamlessly into CI/CD pipelines alongside SAST, SCA, Container, and IaC security tooling.
• Act as a strategic security advisor to engineering, DevOps, and product teams to modernize runtime protection across diverse technology stacks and cloud environments.
Essential Skills & Experience
• 6+ years of dedicated experience in Application Security, Product Security, or Software Security Engineering within complex enterprise environments.
• Hands-on mastery with enterprise-grade DAST and IAST platforms (such as Burp Suite Enterprise, Rapid7, Veracode DAST, Contrast Security, or HCL AppScan).
• Deep understanding of API security testing (REST, GraphQL, gRPC), API gateways, and runtime defense models (RASP, eBPF monitoring, WAF/WAAP). • Proven track record securing multi-language applications (Java, Python, Go, Node.js, C#/.NET, C++) and automating scans within modern CI/CD workflows and cloud environments (AWS, Azure, GCP).
• Strong grasp of vulnerability scoring and risk prioritization frameworks including CVSS v3/v4, EPSS, and OWASP Top 10.
Bonus Points For:
• Hands-on experience securing AI-enabled applications, LLM wrappers, and APIs against OWASP LLM Top 10 threat vectors.
• Familiarity with neighboring AppSec domains including SAST, SCA, Container Security, and Infrastructure-as-Code scanning.
• Software engineering background with the ability to write custom automation scripts (Python, Go, Bash) and review multi-language source code.
• Relevant industry certifications such as OSCP, OSWE, GWAPT, CISSP, AWS Certified Security Specialty, or CKS.
Logistics:
Location: Canada, Remote
Travel Requirement: 0-10%
Why You'll Love Working With Us
At Trimble, we're not just a company that "does good"—we are a team dedicated to making a tangible, positive Real-World Impact.
We build innovative solutions designed to solve the world's most critical challenges. From construction sites to transportation hubs, our work tangibly improves how people live, build, move, and grow.
• You'll work on projects that truly matter: Our purpose-driven culture means you'll be helping to build and deliver solutions that make work faster, safer, and more sustainable for millions of people worldwide. Our impact is tangible, from connected machines that save fuel to data-driven insights that reduce waste.
• Collaborate with like-minded people: Our strong internal culture is a "hidden gem." You will work with a collaborative, supportive team that shares your purpose and fosters a genuine sense of belonging. We're a company of "visionary pragmatists" who think boldly and build things that work.
• Be an owner: Trimble thrives on individuals who take initiative and embrace ownership. You'll find an entrepreneurial spirit where success is often "self-authored," empowering proactive "doers."
Senior Security Engineer, Application Security, AppSec, Dynamic Security, DAST, IAST, Runtime Security, API Security, AI Security, DevSecOps, Remote Canada Jobs
How to Apply: Please submit an online application for this position by clicking on one of the Apply buttons located in this posting.
Join a Values-Driven Team: Belong, Grow, Innovate.
At Trimble, our core values of Belong, Grow, and Innovate aren't just words—they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter.
Candidate Privacy Notices by Country
If you need assistance or would like to request an accommodation in connection with the application process, please contact [email protected].
Skills Required
- 6+ years of dedicated experience in Application Security, Product Security, or Software Security Engineering within complex enterprise environments
- Hands-on mastery of enterprise DAST and IAST platforms
- Deep understanding of REST, GraphQL, and gRPC API security testing, API gateways, and runtime defense models including RASP, eBPF, and WAF/WAAP
- Experience securing multi-language applications using Java, Python, Go, Node.js, C#/.NET, and C++
- Experience automating security scans within modern CI/CD workflows and cloud environments including AWS, Azure, and GCP
- Knowledge of CVSS v3/v4, EPSS, and OWASP Top 10 vulnerability prioritization frameworks
- Experience securing AI-enabled applications, LLM wrappers, and APIs against OWASP LLM Top 10 threats
- Familiarity with SAST, SCA, container security, and Infrastructure-as-Code scanning
- Software engineering background with ability to write Python, Go, or Bash automation scripts and review multi-language source code
- OSCP, OSWE, GWAPT, CISSP, AWS Certified Security Specialty, or CKS certification
Trimble Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Trimble and has not been reviewed or approved by Trimble.
-
Equity Value & Accessibility — An employee stock purchase plan with a discount and lookback, plus RSUs in some roles, makes equity participation accessible. The ESPP is often highlighted as a standout part of the package.
-
Parental & Family Support — Paid parental leave in the U.S. is characterized as solid and well-regarded. This support is repeatedly positioned as a strength within the broader benefits offering.
-
Leave & Time Off Breadth — PTO is described as generous, with some groups using flexible or unlimited models. Paid holidays and flexible time-off approaches contribute meaningfully to work-life support.
Trimble Insights
What We Do
Trimble is transforming the way the world works by delivering products and services that connect the physical and digital worlds. Core technologies in positioning, modeling, connectivity and data analytics enable customers to improve productivity, quality, safety and sustainability. From purpose built products to enterprise lifecycle solutions, Trimble software, hardware and services are transforming industries such as agriculture, construction, geospatial and transportation. For more information about Trimble (NASDAQ:TRMB), visit: www.trimble.com. Trimble products are used in over 141 countries around the world. Employees in more than 30 countries, coupled with a highly capable network of dealers and distribution partners serve and support customers worldwide. As the market leader in most of our businesses, we offer a compelling value proposition to our customers based on productivity, return on investment and environmental stewardship. Come position yourself with an innovative industry leader and position yourself for success.
