DUTIES AND RESPONSIBILITES:
• Responsible for elicitation, analysis, and documentation of business requirements.
• Research and exploration of user requirements, costs, and benefits in support of documentation required for the demand management process.
• Responsible for analyzing the business needs to identify new processes and process improvements that will meet those needs.
• Documents current business processes and models to define requirements and/or gaps.
• Analyze detailed system factors including input/output requirements, information and paper flow, hardware, and software needs.
• Analyze “soft" system factors including roles, responsibilities, policy, culture, etc.
• Evaluate the impact of potential software and process changes on the organization.
• Develop and facilitate groups as necessary in pursuit of eliciting and defining requirements.
• Assist in the creation of the business case documentation.
• Understanding of architectural consistency and usability standards.
• Defines and develops user test cases and validates test results during testing.
• Executes unit and functional test cases.
• May conduct system demonstrations and training sessions, as well as participate in design/review of training content.
• Plays a third level support role by helping to troubleshoot and resolve issues with production systems.
• Participates in associate meetings and communicates any concerns to management.

QUALIFICATIONS AND REQUIREMENTS:
• Bachelor’s degree in computer science, Information Systems, Business, or another related field or equivalent work experience.
• Proven experience leading data migration requirements from legacy systems into a new ERP (Sage X3) environment
• Strong hands-on expertise in requirements elicitation, documentation, and management, with emphasis on data mapping, transformation rules, and validation
• Deep understanding of data structures, data quality, and migration best practices, with the ability to identify gaps and risks early
• Self-driven and accountable professional with strong stakeholder management and communication skills, able to drive outcomes with minimal oversight
• Working knowledge of Confluence and JIRA.
• Experience in any of the following business areas is desired: Sales operations, order entry, accounting, finance, procurement, warehouse operations, order management, and order fulfillment.
• Minimum of 3-5 years’ business analysis or systems analysis experience is preferred.
• Bonus: Sage X3 experience (ERP).

Associate is expected to operate at a proficient level across the following areas of technical knowledge and skill:
• Ability to organize and prioritize work.
• Detail oriented, proactive, creative, and efficient
• Intermediate level abilities in Excel, Outlook, PowerPoint, Visio, and Word
• Familiarity with application integration methods to include understanding of data mapping process.
• Ability to effectively work both independently and collaboratively in a team environment
• Ability to work on simultaneous and complex projects, with domain expertise in at least one business area.
• Expertise in ERP solution selection and implementation is a plus
• Ability to communicate effectively to both technical and non-technical audiences in written and non-written format
• Ability to work with all levels of associates
• Ability to work with minimal supervision in a very dynamic environment
• Ability to learn new systems and tools
• Knowledge of software development life cycle methodologies, processes, and procedures.
• Active listener
• Effective in a variety of formal/informal presentation settings: one-on-one, small, and large groups.

Job Title: AppSec Developer

Location: Montreal, QC

Duration: 10 Months

We are looking for a developer AppSec will play a cross-cutting and structuring role as a center of excellence in secure development.

This person will be required to collaborate closely with the development, CI/CD, information security teams, as well as the teams responsible for governance and responsible use of AI.

Main responsibilities

Application security and security practices

Define, maintain and evolve the security development standards used across Desjardins
Ensuring the security of internally developed frameworks
Identify vulnerabilities, assess the risks, and recommend pragmatic and appropriate corrective measures.
Promote the secure by design approach and shift left security
- Design, develop and maintain reusable Java security libraries, frameworks and components across the organization.
- Integrate application security mechanisms such as authentication, authorization, secure secret management, encryption, traceability, and secure logging.
- Ensuring the security of internally developed frameworks , from their design to their use in production.
- Conduct code reviews of critical components and propose security and maintainability improvements.
- Supporting teams in the integration and use of common security components.

AppSec Center of Excellence

To act as an organizational reference in application security for development
Participate in the development of common patterns, guides and tools
Promote a shared safety culture, aligned with the company's values.
- Developing common technological assets to enable the adoption of best security practices by development teams.
- To act as a mentor and technical advisor to developers on the challenges of secure development and securing Java applications.
- Participate in the evolution of security services and platforms made available to delivery teams.

Integration into the CI/CD chain

Collaborating with DevOps and CI/CD teams to:
- Participate in the integration of AppSec controls into pipelines (SAST, DAST, SCA, secrets)
- Participation in the implementation of vulnerability monitoring, detection and correction tools

Requirements and qualifications

Significant experience in object-oriented software development, with advanced expertise in Java.
Demonstrated experience in developing reusable technical frameworks, libraries or components.
Proven expertise in application security (AppSec).
OWASP Top 10 vulnerabilities, CWE and code security best practices.
Mastery of authentication and authorization concepts (OAuth2, OpenID) Connect, JWT, SAML or equivalents).
Experience in developing security mechanisms such as:
- encryption and key management;
- management of secrets;
- secure logging;
- data validation and protection;
- controls and API protection.
AppSec tools and CI/CD pipelines.
Experience with tools such as SonarQube, Wiz, Kubernetes, GitHub/Azure DevOps, SAST, DAST and SCA.
Good understanding of distributed architectures, microservices and cloud environments.
Strong interest in AI-related security issues

AppSec Developer

Key skills

About this role