As a Senior Application Security Engineer , you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors. Operationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows. Architect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines. Build and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active. Pioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, systematically burning down security backlogs. Provide hands-on technical fix guidance to developers for complex structural flaws and web application vulnerabilities. Drive developer security enablement across the organization—championing our Security Champions program and delivering engaging, impactful secure coding workshops. Partner closely with Platform and Infrastructure Security teams to build frictionless, automated guardrails into CI/CD pipelines. Deep, hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments. Bachelor's degree in Computer Science, Cybersecurity,



or Software Engineering, or equivalent practical experience. Deep understanding of web application vulnerabilities (OWASP Top 10), business logic flaws, and secure coding practices. Proven track record tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines in CI/CD environments. Proven experience leveraging AI/LLM tools to automate security analyses, accelerate triage, and optimize developer security workflows. Fluency in modern software development languages (e.g., Python, Go, JavaScript/TypeScript, Java). Excellent cross-functional influence and communication skills to effectively lead the Security Champions program. Join a growing team and help us move to the next level Amazing benefits & perks, including equity for all Lightspeeders Lots of autonomy, flexible work culture Shaping the company by joining cultural & technical committees Tons of growth opportunities into technical or people management roles Lightspeed equity scheme (we are all owners). Adaptable paid time off and remote work policies. Health insurance. Contributions to your pension plan
- RRSP. Mental health online platform and counseling & coaching services.



Training opportunities to grow your skills and career Fully stacked kitchen (hot and cold beverages, meals served) We invest in you with continuous learning opportunities, global mobility and benefits designed to support you—all within a driven, diverse and inclusive team that's passionate about empowering our communities Please note that we ask applicants to disclose any criminal convictions, and we conduct criminal record checks as part of our hiring process for this role. Lightspeed welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. Lightspeed is building communities through commerce, and we need people from all backgrounds and lived experiences to do that. We were founded in 2005, in Montreal's gay village and our original members were all part of the LGBTQ+ community. The ethos of our business has been about inclusion from the very beginning, and we strive to provide a workplace where everyone belongs. Powering the businesses that are the backbone of the global economy, Lightspeed's one-stop commerce platform helps merchants innovate to simplify, scale, and provide exceptional customer experiences. Our cloud commerce solution transforms and unifies online and physical operations, multichannel sales, expansion to new locations, global payments, financial solutions, and connection to supplier networks. With teams across North America, Europe, and Asia Pacific, the company serves retail, hospitality, and golf businesses in over 100 countries.

📌 Senior Performance Engineer (Canada)
🏢 Lightspeed Commerce
📍 Canada