Senior Engineer, Application Security
Lightspeed Commerce, Inc.14 hours ago
Calgary, CanadaSenior
Responsibilities
- Operationalize Secure by Design principles across feature designs, pull requests, infrastructure-as-code checks, and engineering workflows.
- Architect and validate feature and infrastructure threat models, including AI-generated threat modeling pipelines.
- Configure, tune, and orchestrate SAST, DAST, SCA, secrets, and LLM scanner rulesets.
- Build AppSec processes, automate vulnerability triage and remediation, and reduce security backlogs.
- Provide developers with hands-on guidance for fixing structural flaws and web application vulnerabilities.
- Lead the Security Champions program and deliver secure coding workshops.
- Partner with Platform and Infrastructure Security teams to build automated security guardrails into CI/CD pipelines.
Requirements
- Deep hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments.
- Bachelor’s degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.
- Deep knowledge of web application vulnerabilities, including the OWASP Top 10, business logic flaws, and secure coding practices.
- Experience tuning SAST, DAST, SCA, secrets, and LLM scanner pipelines in CI/CD environments.
- Experience with threat modeling, Secure by Design principles, and developer code remediation guidance.
- Experience using AI/LLM tools to automate security analysis, accelerate triage, and improve developer security workflows.
- Fluency in modern software development languages such as Python, Go, JavaScript/TypeScript, and Java.
- Strong cross-functional influence and communication skills for leading the Security Champions program.
Benefits
- Equity for all employees and a Lightspeed equity scheme.
- Flexible paid time off and remote work policies.
- Health insurance, pension/RRSP contributions, and a $500 annual health and wellness benefit.
- Paid leave and assistance for new parents, plus mental health counseling and coaching services.
- Training, continuous learning, innovation time, global mobility, and growth opportunities into technical or people-management roles.
- Volunteer day, fully stocked kitchen with meals and beverages, and happy hours.
- Criminal record checks are part of the hiring process, and accommodations are available for candidates with disabilities.
Tech Stack
Categories
About Lightspeed Commerce, Inc.
Lightspeed Commerce builds a cloud-based point-of-sale and commerce platform for retail and hospitality, combining POS, omnichannel e-commerce, inventory, analytics, and integrated payments. It monetizes through software subscriptions and payment processing fees for SMBs and multi-location operators. Founded in 2005 and headquartered in Montreal, the company is publicly traded on the NYSE and TSX and serves merchants in over 100 countries.