Senior Application Security Engineer

2 days ago

Canada Lightspeed Commerce Full-time $120,000 - $180,000 Contract

Secure software at Lightspeed as a Senior Application Security Engineer, specializing in threat modeling and developer-embedded security practices.

This senior position leads Lightspeed’s strategic shift toward Secure by Design and hard-left AppSec practices. You will build scalable controls across feature designs, pull requests, infrastructure-as-code checks, and engineering workflows. The work combines vulnerability operations, AI-assisted automation, and developer enablement.

Key Responsibilities:

  • Operationalize Secure by Design principles across engineering workflows
  • Architect feature and infrastructure threat models
  • Tune SAST, DAST, SCA, Secrets, and LLM scanners
  • Automate vulnerability triage and remediation with AI
  • Guide developers through complex security fixes

Requirements:

  • Hands-on Application Security experience in cloud environments
  • Understanding of OWASP Top 10 and business logic flaws
  • Experience tuning security pipelines within CI/CD environments
  • Knowledge of threat modeling and Secure by Design
  • Fluency in Python, Go, JavaScript, TypeScript, or Java

Apply your AppSec, AI automation, and secure coding expertise to strengthen Lightspeed’s software development lifecycle.