Junior Security Engineer

1Password is hiring a Junior Security Engineer for its Application Security team. The role focuses on building and maintaining security tooling, supporting secure product development, and reducing security risk across the software development lifecycle.

Responsibilities

Work within a small team of Application Security Engineers focused on minimizing security risk across our SSDLC

Work with cross functional partners across Security, Product Engineering, Marketing, CX and more on the security parameters of new features across 1Password’s product suite

Design, build, integrate and scale new agentic AI capabilities to enable secure product development activities

Enhance and maintain existing security tools in a variety of areas including static analysis, dynamic analysis, code scanning, and more

Develop and maintain comprehensive dashboards and reporting metrics around our security risk program, tailored to different audiences (technical, non-technical, compliance, senior leadership, etc.)

Preferred

Experience with Rust and/or Golang, or a demonstrated ability to pick up new languages quickly

Experience conducting security code reviews, design architecture guidance, threat modelling

Practical or hands-on experience with web application security topics, including but not limited to topics in OWASP Top 10

Rust

Golang

Security Code Reviews

Architecture Design Guidance

Threat Modeling

Web Application Security

OWASP Top 10

Rapid Learning

Benefits

Maternity and parental leave top-up programs

Competitive health benefits

Generous PTO policy

RSU program for most employees

Retirement matching program

Free 1Password account

Paid volunteer days

Peer-to-peer recognition through Bonusly

Remote-first work environment

Where applicable, participation in incentive programs

Company

Business password, secrets, and access management

Toronto, Ontario, CAN

https://1password.com/

Founded in 2005

1001-5000 employees

Qualifications

You have 0-2+ years of experience in software development

You have a passion and curiosity for security engineering, including but not limited to topics of secure coding, pentesting, vulnerability analysis, security design and architecture

You have strong experience, demonstrated through project work or real world experience, leveraging agentic AI capabilities to accelerate security workflows, automate repetitive tasks, or enhance detection and remediation efforts

You have experience with internal tool development and engineering enablement

You have a strong foundational understanding of software development principles, and are comfortable reading and writing code

You work well in a team environment with positive communications amongst a variety of technical and non-technical stakeholders

You're adaptable and resilient, thriving in fast-paced environments with shifting priorities

Experience with Rust and/or Golang, or a demonstrated ability to pick up new languages quickly

Experience conducting security code reviews, design architecture guidance, threat modelling

Practical or hands-on experience with web application security topics, including but not limited to topics in OWASP Top 10

Required skills

Software Development, Security Engineering, Agentic AI, Internal Tool Development, Secure Coding, Penetration Testing, Vulnerability Analysis, Security Design and Architecture, Rust, Go, Security Code Review, Threat Modeling, Web Application Security, OWASP Top 10

Experience

Entry level