Hi there Thanks for stopping by

Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place

As a Senior Application Security Engineer , you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. You will design, build, and scale state-of-the-art AppSec practices while collaborating closely with Vulnerability Operations to streamline vulnerability triage and remediation. Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors.

What you’ll be doing:

- Operationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows.

- Architect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines.

- Configure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to eliminate false positives and streamline Vulnerability Operations.

- Build and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active.

- Pioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, systematically burning down security backlogs.





- Provide hands-on technical fix guidance to developers for complex structural flaws and web application vulnerabilities.

- Drive developer security enablement across the organization—championing our Security Champions program and delivering engaging, impactful secure coding workshops.

- Partner closely with Platform and Infrastructure Security teams to build frictionless, automated guardrails into CI/CD pipelines.

What you need to bring:

- Deep, hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments.

- Bachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.

- Deep understanding of web application vulnerabilities (OWASP Top 10), business logic flaws, and secure coding practices.

- Proven track record tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines in CI/CD environments.

- Demonstrated experience with threat modeling methodologies, Secure by Design principles, and guiding developers through code remediations.

- Proven experience leveraging AI/LLM tools to automate security analyses, accelerate triage, and optimize developer security workflows.

- Fluency in modern software development languages (e.g., Python, Go, JavaScript/TypeScript, Java).





- Excellent cross-functional influence and communication skills to effectively lead the Security Champions program.

What’s in it for you:

- Join a growing team and help us move to the next level

- Amazing benefits & perks, including equity for all Lightspeeders

- Constant development of both your skill-set and business acumen with limitless growth opportunities

- Lots of autonomy, flexible work culture

- Innovation time to explore and learn at work

- Shaping the company by joining cultural & technical committees

- Tons of growth opportunities into technical or people management roles

- Chance to join a fast-paced, high-growth company

- Opportunity to learn, expand your skill set, forge wonderful relationships and make your mark within the diverse and inclusive Lightspeed family, a true Canadian tech success story

…. And enjoy a range of benefits that will keep you happy, healthy and (not) hungry.

- Lightspeed equity scheme (we are all owners).

- Flexible paid time off and remote work policies.

- Health insurance.

- Contributions to your pension plan - RRSP.

- Health and wellness benefit of $500 per year.

- Paid leave and assistance for new parents.

- Mental health online platform and counseling & coaching services.

- Training opportunities to grow your skills and career

- Volunteer day.

- Fully stacked kitchen (hot and cold beverages, meals served)

- Happy hours to build your relationships with colleagues after work

Fuel your growth. Find your people.

A

📌 Senior Engineer, Application Security (Canada)
🏢 Lightspeed Commerce
📍 Canada