1

Checkmarx Jobs in Ontario (NOW HIRING)

Good understanding of secure coding practices in regulated industries and tools such as Blackduck, Checkmarx, or Aquasec. * Strong database experience, preferably with DB2 or similar relational ...

Exposure to static code analysis tools such as CheckMarx, BlackDuck, WebInspect is an asset. * Experience in OWASP vulnerabilities is an asset. * Excellent communication skills, problem-solving ...

Frontend development background in building web applications using technologies like ReactJS, NodeJS, NextJS and modern JavaScript toolsets (SonarQube, CheckMarx, Web Inspect) and knowledgeable in ...

Security testing tools experience (Checkmarx, NexusIQ, or similar). * Experience with cloud platforms (AWS, Azure, GCP). The base compensation range for this role in the posted location is: 75,000 to ...

Hands-on experience with application security testing tools such as Burp Suite, Fortify, Checkmarx, Veracode, and ZAP. * Experience conducting threat modeling, penetration testing, secure software ...

Knowledge of checkmarx, Blackduck, Webinspect * Knowledge of Unix/Linux OS What's in it for you? * Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every ...

Checkmarx information

What is Checkmarx?

Checkmarx is a software security platform that specializes in application security testing. It helps developers and security teams identify vulnerabilities in their code through automated static and interactive application security testing (SAST and IAST). Checkmarx integrates with development pipelines to scan source code, open-source libraries, and APIs, enabling teams to find and fix security issues early in the software development lifecycle. The platform supports a wide range of programming languages and frameworks, making it a popular choice for organizations focused on secure software development.

What are the key skills and qualifications needed to thrive as a Checkmarx application security engineer?

To thrive as a Checkmarx Application Security Engineer, you need a solid understanding of secure software development, vulnerability assessment, and application security principles, often supported by a degree in computer science or related field. Experience with the Checkmarx SAST platform, knowledge of CI/CD pipelines, and relevant certifications such as CISSP or CEH are typically required. Strong analytical thinking, communication skills, and the ability to work collaboratively with development teams make someone stand out in this position. These skills are vital for effectively identifying and mitigating security risks in the software development lifecycle, ensuring robust protection of organizational assets.

What are some common challenges faced by professionals working with Checkmarx in an application security role?

Professionals working with Checkmarx often encounter challenges such as integrating the tool into existing CI/CD pipelines, managing false positives in scan results, and maintaining clear communication between security and development teams. Staying up-to-date with evolving vulnerabilities and ensuring that all codebases are consistently scanned can also be demanding. However, these challenges are typically addressed through strong collaboration, continuous learning, and leveraging Checkmarx's robust reporting and integration features.

What is the difference between Checkmarx vs SAST Developer?

AspectCheckmarxSAST Developer
CredentialsSecurity certifications, coding knowledgeSecurity certifications, coding knowledge
Work EnvironmentSecurity teams, development teamsDevelopment teams, security teams
Industry UsageApplication security testing toolsDeveloping and integrating SAST tools
Search IntentCompare security tools and rolesRoles involving static application security testing

Checkmarx professionals focus on using security testing tools like Checkmarx to identify vulnerabilities, while SAST Developers develop and maintain static application security testing (SAST) tools and integrations. Both roles require security and coding expertise but differ in their primary focus—one on utilizing security solutions, the other on creating them.

What are popular job titles related to Checkmarx jobs in Ontario?

For Checkmarx jobs in Ontario, the most frequently searched job titles are:

What job categories do people searching Checkmarx jobs in Ontario look for?

The top searched job categories for Checkmarx jobs in Ontario are:

Infographic showing various Checkmarx job openings in Ontario as of August 2026, with employment types broken down into 81% Full Time, 10% Part Time, and 9% Contract. Highlights an 57% Physical, 15% Hybrid, and 28% Remote job distribution.

Lead Software Engineer

Scotiabank

Scarborough, ON • On-site

Full-time

Re-posted 27 days ago


Job description

Requisition ID: 261661 
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Lead Developer - Job Requirements

Join a purpose-driven, high-performing team committed to delivering impactful results in an inclusive and collaborative environment. If you are passionate about technology, thrive in leadership roles, and take pride in building scalable, high-quality solutions, this opportunity is for you.

In This Role, You Will

  • Design, develop, and implement scalable APIs and Microservices using cloud platforms (e.g., Google Cloud Platform).
  • Lead the end-to-end delivery of complex applications, ensuring high standards of quality, security, and compliance.
  • Take ownership of technical solutions, ensuring proper design documentation and governance practices are followed.
  • Analyze complex business requirements and translate them into robust, scalable technical solutions.
  • Drive technical decision-making across Agile teams in collaboration with Solution Architects and senior stakeholders.
  • Define and enforce coding standards, architectural guidelines, and testing frameworks.
  • Partner with Delivery Leads to plan milestones, manage risks, and ensure timely and successful delivery.
  • Apply industry best practices in design, development, testing, and deployment of enterprise applications.
  • Mentor and guide developers, fostering technical excellence and continuous improvement within the team.
  • Monitor system performance, proactively identify issues, and lead root cause analysis and resolution.
  • Provide production support and ensure application stability and reliability.
  • Adapt quickly to changing priorities in a fast-paced, evolving environment.

Do You Have the Skills to Succeed in This Role?

  • 8+ years of hands-on experience in application development using Java frameworks, with strong expertise in Object-Oriented Programming and Design Patterns.
  • Proven experience in leading development teams and driving technical solutions for large-scale applications.
  • Solid experience across the full SDLC: requirements analysis, design, development, testing, release, and cloud deployment.
  • Hands-on experience with Microservices Architecture, REST APIs, Spring Boot, and modern front-end frameworks such as Angular or React.
  • Experience working with cloud-native technologies (GCP preferred) and containerization tools like Docker and Kubernetes (GKE).
  • Strong knowledge of DevOps practices and CI/CD pipelines (Bitbucket, Git, Jenkins, Maven, JFrog Artifactory, ArgoCD).
  • Experience with caching technologies (Redis) and performance optimization.
  • Good understanding of secure coding practices in regulated industries and tools such as Blackduck, Checkmarx, or Aquasec.
  • Strong database experience, preferably with DB2 or similar relational databases.
  • Excellent analytical, troubleshooting, and problem-solving skills.
  • Strong communication skills with the ability to collaborate across cross-functional teams and influence stakeholders.
  • Demonstrated ability to mentor junior developers and lead by example in technical execution.
  • Bachelor's degree in Computer Science, Engineering, or a related field.

Nice to Have

  • Experience in banking or financial services domain.
  • Exposure to event-driven architecture and messaging systems (Kafka, Pub/Sub).
  • Experience with observability tools (Splunk, Dynatrace, Prometheus).

Location(s):  Canada : Ontario : Toronto 
Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.  
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our  Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.