Principal Application Security Specialist
Global Relay1 day ago
Vancouver, CanadaStaff+
Responsibilities
- Own application security testing methodology and standards across web, API, mobile, and AI/LLM domains.
- Lead complex and high-risk security assessments, original research, advanced threat modeling, and development of testing techniques and tooling.
- Define organization-wide triage, escalation, evidence-quality, remediation verification, and security-gating standards.
- Drive integration of security controls into SDLC and CI/CD pipelines using automated frameworks, scanning tools, APIs, and plugins.
- Select, deploy, and manage SAST, DAST, SCA, and container security tools in collaboration with Engineering.
- Analyze vulnerability data, manage false positives, and establish standards for root-cause analysis and remediation quality.
- Define security testing coverage and effectiveness measurements and drive continuous improvement.
- Partner with engineering, product, architecture, and platform leadership to influence secure design and prioritize security investment.
- Lead security education sessions, mentor specialists, create documentation and training materials, and represent application security in cross-functional and external forums.
Requirements
- 8+ years of experience across application/product security testing and DevSecOps.
- Expert knowledge of software security and strong understanding of secure development and coding practices.
- Experience with OWASP, MITRE, NIST, SAST, DAST, and SCA.
- Scripting experience with Python, Java, Bash, and PowerShell.
- Experience with DevOps and CI/CD tooling including Git, Jenkins, Docker, and Kubernetes.
- Ability to work cross-functionally with Security, Development, and Engineering teams.
- Strong communication, problem-solving, self-direction, and attention to detail.
Benefits
- Comprehensive extended health benefits, virtual healthcare, and a wellness allowance.
- Annual vacation days that increase with tenure, paid sick days, maternity/parental enhancement, bonus, and RRSP contribution matching.
- Vancouver-based employees receive a subsidized meal program from the in-house culinary team.
- The posting provides a British Columbia base salary range of $125,000–$160,000 CAD.
About Global Relay
Global Relay builds cloud-based archiving, communications compliance, eDiscovery, and surveillance software for financial services and other regulated industries. Its SaaS platform captures and preserves email, IM, voice, and collaboration data, with an integrated archive, data connectors, and the Global Relay App for compliant messaging. Founded in 1999 and headquartered in Vancouver, the company is privately held and focuses on recordkeeping to meet regulatory requirements.