OpenText
Principal Solutions Consultant - Application Security
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About OpenText
OpenText is a Canadian enterprise software company based in Waterloo, Ontario, founded in 1991. It originated from a University of Waterloo research project that digitized the Oxford English Dictionary and developed early search engine technology. The company went public in 1996 and has expanded its capabilities through strategic acquisitions, including the maker of Livelink document management software. OpenText specializes in enterprise content management (ECM) software, offering the OpenText ECM Suite. This suite allows organizations to manage various types of digital content, such as documents, records, web content, and multimedia, while supporting business processes and collaboration. OpenText serves a diverse customer base, including many large corporations and government agencies across 114 countries, with its software used by approximately 100 million users worldwide. The company employs around 4,000 people and is publicly traded on the Toronto Stock Exchange and NASDAQ.
Security at OpenText
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- OpenText's stated AppSec mission is to "Empower developers with real-time feedback and tailored expertise".
- Their approach to developer enablement is to "Integrate where your developers work"and promote "Shift Left Made Simple: Secure Coding in Your IDE and Git Pipeline".
- The risk philosophy involves ASPM aggregating and normalizing findings from all sources into one centralized view, and enriching findings with asset context and exploitability.
Security Team
Verbatim evidence describing the AppSec team's internal reporting line (e.g., reports to CISO, CTO) is not publicly available. Key public-facing leaders include Muhi S. Majzoub, Executive Vice President, Security Products, and Marc St-Pierre, Leader, Global Consulting Practice for Cybersecurity. No single, named internal "Head of Application Security"or "CISO"with AppSec-specific title was found with a public, verbatim AppSec leadership quote. Verbatim headcount for an internal AppSec team is not publicly available.
Key Initiatives
No public statement describing a named "Security Champions"program was located. "Shift Left"in practice involves "Shift Left Made Simple: Secure Coding in Your IDE and Git Pipeline", activating "Aviator in CI pipelines for automated triage and remediation", and "Pull request guardrails: On every PR, SAST runs + Aviator auditing push only verified issues to Jira."
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.