Secure software at Lightspeed as a Senior Application Security Engineer, specializing in threat modeling and developer-embedded security practices.

This senior position leads Lightspeed’s strategic shift toward Secure by Design and hard-left AppSec practices. You will build scalable controls across feature designs, pull requests, infrastructure-as-code checks, and engineering workflows. The work combines vulnerability operations, AI-assisted automation, and developer enablement.

Key Responsibilities:

- Operationalize Secure by Design principles across engineering workflows
- Architect feature and infrastructure threat models
- Tune SAST, DAST, SCA, Secrets, and LLM scanners
- Automate vulnerability triage and remediation with AI
- Guide developers through complex security fixes

Requirements:

- Hands-on Application Security experience in cloud environments
- Understanding of OWASP Top 10 and business logic flaws
- Experience tuning security pipelines within CI/CD environments
- Knowledge of threat modeling and Secure by Design
- Fluency in Python, Go, JavaScript, TypeScript, or Java

Apply your AppSec, AI automation, and secure coding expertise to strengthen Lightspeed’s software development lifecycle.

📌 Senior Application Security Engineer (Canada)
🏢 Lightspeed Commerce
📍 Canada