Application Security Analyst — Remote Impact

Kal Tire

Vernon

On-site

CAD 88,000 - 103,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Group health, dental and vision

Employee Assistance Program

RRSP/DPSP matching program

Discount on tires and mechanical (KalT

Job summary

Kal Tire is seeking an Application Security Analyst to join our Cybersecurity team in Vernon, BC or Remote. You will identify security risks, support secure software development practices, and implement controls to strengthen our security posture across applications, systems, and data.

You will work with developers, Information Services, and business stakeholders to lead security assessments, support vulnerability management, and embed security throughout the software development lifecycle,

Qualifications

4+ years of hands-on cybersecurity experience across application, cloud, web, network, and endpoint security.

Responsibilities

Lead application security testing activities, including penetration testing and vulnerability assessments.
Partner with developers and Information Services teams to remediate vulnerabilities and promote secure coding practices.
Conduct risk, privacy, and security assessments for new and existing applications and systems.
Integrate security practices into the Secure Software Development Lifecycle (SSDLC), including threat modeling, architecture reviews, and secure design validation.
Perform manual code reviews and use automated security testing tools, including SAST, DAST, and IAST.
Deploy, configure, and optimize application security technologies such as Web Application Firewalls (WAF) and Software Composition Analysis (SCA) solutions.
Investigate application security incidents, conduct root cause analysis, and implement preventative measures.
Assess and secure cloud, web, and AI-enabled applications, including LLM integrations.
Ensure applications align with recognized security standards and frameworks, including OWASP Top 10 and OWASP Top 10 for LLM Applications.
Participate in incident response activities, tabletop exercises, and security readiness initiatives.
Support security awareness programs and secure development education across the organization.
Research emerging threats, vulnerabilities, and security technologies and recommend appropriate solutions.