Secure software at Lightspeed as a Senior Application Security Engineer, specializing in threat modeling and developer-embedded security practices.This senior position leads Lightspeed’s strategic shift toward Secure by Design and hard-left AppSec practices. You will build scalable controls across feature designs, pull requests, infrastructure-as-code checks, and engineering workflows. The work combines vulnerability operations, AI-assisted automation, and developer enablement.Key Responsibilities:

Operationalize Secure by Design principles across engineering workflowsArchitect feature and infrastructure threat modelsTune SAST, DAST, SCA, Secrets, and LLM scannersAutomate vulnerability triage and remediation with AIGuide developers through complex security fixesRequirements:

Hands-on Application Security experience in cloud environmentsUnderstanding of OWASP Top 10 and business logic flawsExperience tuning security pipelines within CI/CD environmentsKnowledge of threat modeling and Secure by DesignFluency in Python, Go, JavaScript, TypeScript, or JavaApply your AppSec, AI automation, and secure coding expertise to strengthen Lightspeed’s software development lifecycle.

📌 Senior Application Security Engineer (Winnipeg)
🏢 Lightspeed Commerce
📍 Winnipeg