Secure software at Lightspeed as a Senior Application Security Engineer, specializing in threat modeling and developer-embedded security practices. This senior position leads Lightspeed’s strategic shift toward Secure by Design and hard-left AppSec practices. You will build scalable controls across feature designs, pull requests, infrastructure-as-code checks, and engineering workflows.

The work combines vulnerability operations, AI-assisted automation, and developer enablement. Key Responsibilities:

Operationalize Secure by Design principles across engineering workflows Architect feature and infrastructure threat models Tune SAST, DAST, SCA, Secrets, and LLM scanners Automate vulnerability triage and remediation with AI Guide developers through complex security fixes Requirements:

Hands-on Application Security experience in cloud environments Understanding of OWASP Top 10 and business logic flaws Experience tuning security pipelines within CI/CD environments Knowledge of threat modeling and Secure by Design Fluency in Python, Go, JavaScript, TypeScript, or Java Apply your AppSec, AI automation, and secure coding expertise to strengthen Lightspeed’s software development lifecycle.

📌 Senior Application Security Engineer (Winnipeg)
🏢 Lightspeed Commerce
📍 Winnipeg