Senior Engineer, Application Security

Hi there! Thanks for stopping by Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place! As a Senior Application Security Engineer , you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. You will design, build, and scale state-of-the-art AppSec practices while collaborating closely with Vulnerability Operations to streamline vulnerability triage and remediation. Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors. What you’ll be doing: • Operationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows. • Architect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines. • Configure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to eliminate false positives and streamline Vulnerability Operations. • Build and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active. • Pioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, systematically burning down security backlogs. • Provide hands-on technical fix guidance to developers for complex structural flaws and web application vulnerabilities. • Drive developer security enablement across the organization—championing our Security Champions program and delivering engaging, impactful secure coding workshops. • Partner closely with Platform and Infrastructure Security teams to build frictionless, automated guardrails into CI/CD pipelines. What you need to bring: • Deep, hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments. • Bachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience. • Deep understanding of web application vulnerabilities (OWASP Top 10), business logic flaws, and secure coding practices. • Proven track record tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines in CI/CD environments. • Demonstrated experience with threat modeling methodologies, Secure by Design principles, and guiding developers through code remediations. • Proven experience leveraging AI/LLM tools to automate security analyses, accelerate triage, and optimize developer security workflows. • Fluency in modern software development languages (e.g., Python, Go, JavaScript/TypeScript, Java). • Excellent cross-functional influence and communication skills to effectively lead the Security Champions program. What’s in it for you: • Join a growing team and help us move to the next level • Amazing benefits & perks, including equity for all Lightspeeders • Constant development of both your skill-set and business acumen with limitless growth opportunities • Lots of autonomy, flexible work culture • Innovation time to explore and learn at work • Shaping the company by joining cultural & technical committees • Tons of growth opportunities into technical or people management roles • Opportunity to join a fast-paced, high-growth company • Opportunity to learn, expand your skill set, forge wonderful relationships and make your mark within the diverse and inclusive Lightspeed family, a true Canadian tech success story …. And enjoy a range of benefits that will keep you happy, healthy and (not) hungry. • Lightsp