Principal Application Security Specialist
Global Relay2 hours ago
Responsibilities
- Own application security testing methodologies and standards across web, API, mobile, and AI/LLM domains.
- Lead complex, novel, and high-risk security assessments, including original research and new testing techniques and tooling.
- Define organization-wide triage, escalation, evidence-quality, remediation verification, retest, and release-closure standards.
- Support penetration testing and offensive security program direction and own advanced threat modeling for critical architectures.
- Drive secure SDLC and CI/CD integration through automated, risk-based security controls and release gating.
- Select, deploy, and manage SAST, DAST, SCA, and container security tools through APIs, plugins, scripting, and open-source solutions.
- Analyze vulnerability data, manage false positives, and set standards for root-cause analysis and remediation quality.
- Define testing coverage and effectiveness measurements and drive continuous improvement.
- Partner with engineering, product, platform, and architecture leaders to influence secure design and security investment.
- Lead security education sessions, mentor specialists, develop documentation and training, and represent application security in cross-functional and external forums.
Requirements
- 8+ years of experience across application or product security testing and DevSecOps.
- Expert knowledge of software security and solid understanding of secure development and coding practices.
- Experience with OWASP, MITRE, NIST, SAST, DAST, and SCA.
- Experience with Python, Java, Bash, PowerShell, Git, Jenkins, Docker, and Kubernetes.
- Ability to work cross-functionally with Security, Development, Engineering, platform, product, and architecture teams.
- Strong communication skills with the ability to translate technical concepts for varied audiences.
- Self-directed, detail-oriented, and skilled at solving complex problems.
Benefits
- Comprehensive extended health benefits program, including virtual healthcare and a wellness allowance.
- Annual vacation days that increase with tenure and paid sick days.
- Maternity and parental enhancement program.
- Bonus and RRSP contribution matching program.
- Subsidized meal program for Vancouver-based employees.
- Mentoring, coaching, and career development support.
- Equal-opportunity workplace with reasonable adjustments, accommodations, and tailored personal time.
About Global Relay
Global Relay is a leading provider of end-to-end recordkeeping solutions for the global financial sector and other highly regulated industries. Founded in 1999, Global Relay delivers a complete suite of compliant communications solutions, spanning a unified, intelligent archive, powerful data connectors, AI-enabled surveillance, and our own Global Relay App. Global Relay’s integrated recordkeeping solutions enable regulated organizations to meet collaboration, privacy, and security requirements.