Senior Engineer, Application Security

Lightspeed Commerce

1d • Remote

About The Position

As a Senior Application Security Engineer, you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. You will design, build, and scale state-of-the-art AppSec practices while collaborating closely with Vulnerability Operations to streamline vulnerability triage and remediation. Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors.

Requirements

• Deep, hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments.
• Bachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.
• Deep understanding of web application vulnerabilities (OWASP Top 10), business logic flaws, and secure coding practices.
• Proven track record tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines in CI/CD environments.
• Demonstrated experience with threat modeling methodologies, Secure by Design principles, and guiding developers through code remediations.
• Proven experience leveraging AI/LLM tools to automate security analyses, accelerate triage, and optimize developer security workflows.
• Fluency in modern software development languages (e.g., Python, Go, JavaScript/TypeScript, Java).
• Excellent cross-functional influence and communication skills to effectively lead the Security Champions program.

Responsibilities

• Operationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows.
• Architect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines.
• Configure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to eliminate false positives and streamline Vulnerability Operations.
• Build and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active.
• Pioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, systematically burning down security backlogs.
• Provide hands-on technical fix guidance to developers for complex structural flaws and web application vulnerabilities.
• Drive developer security enablement across the organization—championing our Security Champions program and delivering engaging, impactful secure coding workshops.
• Partner closely with Platform and Infrastructure Security teams to build frictionless, automated guardrails into CI/CD pipelines.

Benefits

• Equity for all Lightspeeders
• Constant development of both your skill-set and business acumen with limitless growth opportunities
• Lots of autonomy, flexible work culture
• Innovation time to explore and learn at work
• Shaping the company by joining cultural & technical committees
• Tons of growth opportunities into technical or people management roles
• Opportunity to join a fast-paced, high-growth company
• Opportunity to learn, expand your skill set, forge wonderful relationships and make your mark within the diverse and inclusive Lightspeed family
• Lightspeed equity scheme (we are all owners)
• Flexible paid time off and remote work policies
• Health insurance
• Contributions to your pension plan - RRSP
• Health and wellness benefit of $500 per year
• Paid leave and assistance for new parents
• Mental health online platform and counseling & coaching services
• Training opportunities to grow your skills and career
• Volunteer day
• Fully stacked kitchen (hot and cold beverages, meals served)
• Happy hours to build your relationships with colleagues after work

What This Job Offers

• Job Type: Full-time
• Career Level: Senior