Senior Application Security Engineer at Spring Financial Senior Application Security Engineer Spring Financial is revolutionizing financial access for Canadians, providing smart credit‑building, mortgage, and lending solutions. As one of Canada’s fastest‑growing fintech companies, annually we help 1 million customers explore their financing options with ease—online, via text, or over the phone. Our products can be explored on our website: NOTE: This is a full‑time, permanent, hybrid position in downtown Vancouver, with 3 set days in the office and 2 WFH. As a Senior Application Security Engineer at Spring Financial, you will lead technical efforts to secure the software systems that power our business. You are responsible for driving security best practices across our engineering organization—embedding secure development into how we design, build, and deploy software. You’ll work closely with product engineering, DevOps, platform, and compliance teams to identify risks, implement controls, and help teams ship secure, reliable features. This is primarily an individual contributor (IC) role, but may include leading a small team of engineers or acting as the technical owner for application security across the organization. You are expected to lead by example through robust technical execution, collaborative problem‑solving, and a practical, risk‑aware approach to security. Own Spring’s application security strategy and roadmap — aligning initiatives with risk priorities, business needs, and platform evolution. threat modeling, secure code review, dependency management, static/dynamic analysis). Partner with engineering teams to identify and remediate security risks across applications,



services, APIs, and cloud environments. Define and manage Spring’s SDL (Secure Development Lifecycle), embedding security reviews, tooling, and guardrails into CI/CD workflows. Evaluate and implement security tools and services (e.g., Collaborate with platform, DevOps, and IT teams on access control, secret management, and zero‑trust enforcement. Mentor and grow the appsec team, supporting both technical depth and cross‑functional influence. Act as a subject matter expert for product and engineering teams on secure architecture, data protection, and third‑party risk. Track and communicate security posture through clear metrics, risk registers, and executive‑level reporting. 5+ years of experience in application security, software engineering, or security engineering roles, including at least 2 years in a leadership capacity. Deep knowledge of web and cloud application security principles, OWASP Top 10, and secure coding best practices. Experience implementing SDL processes and integrating security into CI/CD pipelines and agile environments. AWS, microservices, containerisation, API gateways). Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, or similar). OAuth, JWT, Vault, AWS IAM). Competitive annual salary ranging from $131,500 to $155,000, reflective of experience and impact. Comprehensive benefits package, including extended health, dental, and vision coverage — with 100% of monthly premiums covered by Spring. GRSP matching programme to support your long‑term financial goals. This position is hybrid and requires in‑office presence; relocation assistance is available for the hired candidate (if out of province).

📌 Virtual Senior Application Security Engineer (Vancouver)
🏢 Spring Financial
📍 Vancouver