Senior Application Security Engineer

Nutrien (Canada) Holdings ULC is hiring a Senior Application Security Engineer in Deerfield, IL to strengthen application security across the software development lifecycle. In this onsite role, you will guide vulnerability identification and remediation practices, align teams around risk-based priorities, and help mature application security execution across development, Dev Ops, and security functions.

This position focuses on leading vulnerability management activities end to end, from assessment and prioritization through practical remediation outcomes in complex enterprise environments. You will also apply established security and risk frameworks to support decision-making and mentor peers on consistent application security practices.

• Build strong working relationships across application development, Dev Ops, cyber security, and IT to influence secure development outcomes with expert technical guidance
• Lead vulnerability management, including prioritization, risk evaluation, progress tracking, and stakeholder communication
• Monitor emerging business, technology, and cyber security trends and translate insights into improvements for development teams
• Partner with engineering and Dev Ops teams to evaluate, implement, and optimize vulnerability management capabilities across people, process, and technology
• Own and enhance core components of vulnerability management and application security solutions in complex enterprise environments
• Conduct and oversee targeted vulnerability assessments to identify control gaps and assess the effectiveness of existing safeguards
• Use security and risk frameworks such as ISO 27001-2,
  PCI DSS
  , NIST CSF 20
  , ITIL
  , COBIT
  , CVSSv4
  , OWASP
  , and MITRE ATT&CK to guide technical decisions and remediation priorities
• Provide hands‑on expertise with vulnerability management and prioritization platforms to drive adoption of risk‑based remediation
• Perform root cause analysis on vulnerabilities and work with development and platform teams to define effective solutions
• Assess exploitability and business impact, then recommend remediation strategies that balance risk reduction with operational needs
• Bring broad cyber security expertise spanning vulnerability management, privacy, incident response, governance, risk and compliance, enterprise security strategy, and security architecture
• Lead and coordinate cyber security initiatives by shaping plans, driving execution, and communicating status to technical stakeholders and leadership
• Mentor team members through technical guidance and support to build consistency in application security execution
• Lead vulnerability identification, assessment, prioritization, and remediation across code, infrastructure, and applications, including technical direction on secure development, automation, and risk reduction
• Act as a trusted escalation point for application and vulnerability management matters, partnering across teams to drive remediation and consistent execution across initiatives
• Provide leadership continuity and decision support when the manager is out of office

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field is preferred
• Minimum 6-8 years of related experience
• Strong understanding of the vulnerability management lifecycle, governance, and risk‑based prioritization in enterprise environments
• Deep familiarity with application security and risk frameworks including ISO 27001-2,
  ISO 31000
  , PCI DSS
  , OWASP ASVS
  , NIST frameworks,
  ITIL
  , COBIT
  , CVSSv4
  , and MITRE ATT&CK
• Hands‑on experience with vulnerability management tools such as Qualys
  , Tenable
  , Snyk
  , and Truffle Hog Pro
• Experience working in Agile development environments
• Strong understanding of operating…