Application Security Analyst

Kal Tire; Vernon; On-site; CAD 88,000 - 103,000; Full time

Benefits offered by this job

Group health, dental and vision

Employee Assistance Program

RRSP/DPSP matching program

Discount on tires and mechanical (KalT

Job summary

Kal Tire is seeking an Application Security Analyst to join our Cybersecurity team in Vernon, BC or Remote. You will identify security risks, support secure software development practices, and implement controls to strengthen our security posture across applications, systems, and data.

You will work with developers, Information Services, and business stakeholders to lead security assessments, support vulnerability management, and embed security throughout the software development lifecycle,

Qualifications

• 4+ years of hands-on cybersecurity experience across application, cloud, web, network, and endpoint security.

Responsibilities

• Lead application security testing activities, including penetration testing and vulnerability assessments.
• Partner with developers and Information Services teams to remediate vulnerabilities and promote secure coding practices.
• Conduct risk, privacy, and security assessments for new and existing applications and systems.
• Integrate security practices into the Secure Software Development Lifecycle (SSDLC), including threat modeling, architecture reviews, and secure design validation.
• Perform manual code reviews and use automated security testing tools, including SAST, DAST, and IAST.
• Deploy, configure, and optimize application security technologies such as Web Application Firewalls (WAF) and Software Composition Analysis (SCA) solutions.
• Investigate application security incidents, conduct root cause analysis, and implement preventative measures.
• Assess and secure cloud, web, and AI-enabled applications, including LLM integrations.
• Ensure applications align with recognized security standards and frameworks, including OWASP Top 10 and OWASP Top 10 for LLM Applications.
• Participate in incident response activities, tabletop exercises, and security readiness initiatives.
• Support security awareness programs and secure development education across the organization.
• Research emerging threats, vulnerabilities, and security technologies and recommend appropriate solutions.

Skills

Penetration testing

Vulnerability management

CI/CD security

Secure coding practices

Cloud security

AI security / LLMs

Security testing tools

Microsoft security knowledge

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

SAST

DAST

IAST

WAF

SCA

Azure DevOps

Microsoft Defender for Endpoint

Microsoft Sentinel

Defender for Cloud

Job description

Vernon, BC or Remote

Kal Tire is seeking an Application Security Analyst to join our Cybersecurity team. In this role, you'll help protect our applications, systems, and data by identifying security risks, supporting secure software development practices, and implementing controls that strengthen our overall security posture.

Description

Application Security Analyst

Vernon, BC or Remote

Kal Tire is seeking an Application Security Analyst to join our Cybersecurity team. In this role, you'll help protect our applications, systems, and data by identifying security risks, supporting secure software development practices, and implementing security controls that strengthen our overall security posture.

Working closely with developers, Information Services teams, and business stakeholders, you'll lead security assessments, support vulnerability management, and help ensure that security is embedded throughout the software development lifecycle. You'll also play an important role in securing cloud-based and AI-enabled applications while helping the organization stay ahead of emerging threats.

Responsibilities

• Lead application security testing activities, including penetration testing and vulnerability assessments.
• Partner with developers and Information Services teams to remediate vulnerabilities and promote secure coding practices.
• Conduct risk, privacy, and security assessments for new and existing applications and systems.
• Integrate security practices into the Secure Software Development Lifecycle (SSDLC), including threat modeling, architecture reviews, and secure design validation.
• Perform manual code reviews and use automated security testing tools, including SAST, DAST, and IAST.
• Deploy, configure, and optimize application security technologies such as Web Application Firewalls (WAF) and Software Composition Analysis (SCA) solutions.
• Investigate application security incidents, conduct root cause analysis, and implement preventative measures.
• Assess and secure cloud, web, and AI-enabled applications, including LLM integrations.
• Ensure applications align with recognized security standards and frameworks, including OWASP Top 10 and OWASP Top 10 for LLM Applications.
• Participate in incident response activities, tabletop exercises, and security readiness initiatives.
• Support security awareness programs and secure development education across the organization.
• Research emerging threats, vulnerabilities, and security technologies and recommend appropriate solutions.

Job Requirements

• 4+ years of hands-on cybersecurity experience, including secure coding practices, web technologies, and application security.
• 3+ years of experience managing penetration testing programs and vulnerability assessments.
• 3+ years of experience using security testing tools and integrating security controls into CI/CD pipelines.
• 4+ years of experience managing cybersecurity solutions in a complex enterprise environment.
• 2+ years of experience with Microsoft security technologies, including Azure DevOps, Microsoft Sentinel, Microsoft Defender for Endpoint, and Defender for Cloud.
• 1+ year of experience securing AI-enabled applications, including LLM integrations.
• Proven experience as an Application Security Analyst or in a similar cybersecurity role.
• Strong understanding of application, cloud, web, network, and endpoint security principles.
• Knowledge of cybersecurity frameworks, security controls, and industry best practices.
• Ability to assess risk and communicate technical concepts to both technical and non-technical audiences.
• Strong analytical, problem-solving, and technical documentation skills.
• Experience evaluating security controls and recommending improvements.
• Commitment to continuous learning and staying current with emerging technologies and threats.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Relevant certifications such as CISSP, CSSLP, GSEC, CASP+, CEH, or equivalent are considered an asset.

Special Requirements

• Valid driver's license.
• Ability to travel occasionally.
• Participation in an on-call rotation.
• Ability to work effectively in a remote work environment.

Nice to Have

• Experience with Microsoft Defender and Microsoft Sentinel.
• Experience with network security technologies and controls.

What We Offer

• The target compensation for this role is $88,270-$102,640 per year based on experience
• Extended group health, dental, and vision benefits are available to all eligible full-time and part-time permanent employees.
• Employee Assistance Program
• A group RRSP/DPSP matching program
• Discount on tires and mechanical services
• Positive work culture, opportunities for growth and development, and work-life balance.
• Opportunities for professional development, such as training programs, mentorship, and tuition reimbursement.

Why Kal Tire

At Kal Tire, we invest in our people and create opportunities for growth, learning, and meaningful work. You'll join a collaborative team that values innovation, continuous improvement, and making a real impact through technology and cybersecurity.

Hiring Process

All interviews and hiring decisions are being made by Kal Tire’s hiring managers and recruiters. Kal Tire uses AI tools to support parts of recruitment, including but not limited to job posting and pre-screening.

Kal Tire is committed to fostering a workplace where everyone feels valued, included, and empowered to thrive. We embrace diverse perspectives and welcome applications from all backgrounds and experiences. Candidates considered for the role must be legally eligible to work for any employer in Canada. A Canadian Criminal Record Check may be required for certain positions as part of the final stages of the hiring process.

Solving our customers’ automotive challenges and making a positive impact - It's how we roll, and it's been that way since Tom Foord opened the doors to Kal Tire in 1953 in beautiful Vernon, BC. Over the years, we've become a trusted partner for large and small industries and fleets across Canada. Our customers rely on our expertise, our make-it-happen approach to service, and our lineup of the most trusted tire brands in over 260 retail locations coast to coast. Kal Tire is also the largest truck re-treader in Canada, with 11 retread facilities across Canada and internationally, and has a state-of-the-art tire recycling facility in Chile, where 40% of the weight of scrap tires is recycled to return to mines as an alternative fuel. In addition, Kal Tire's Mining Tire Group is an international leader in mining tire service and supply, servicing more than 150 mine sites across five continents. Kal Tire offers a culture that fosters inclusion and respect. We are committed to providing accessible employment practices in compliance with the AODA and AMA. Accommodation requests can be made at any stage of the recruitment or employment process. Applicants are asked to make their needs/requirements known.