Application Security Engineer Prin

Dayforce; Canada; Remote; CAD 90,000 - 130,000; Full time

Job summary

Dayforce, a leading global human capital management company, is seeking an Application Security Engineer to enhance application security across teams. This role involves conducting security assessments, influencing secure architecture, and driving strategic security initiatives. The ideal candidate will have strong technical skills in security and software development, particularly in cloud environments.

Benefits

Excellent time away from work programs

Comprehensive wellness initiatives

Recognition through competitive pay and benefits

Opportunities for personal and professional growth

Qualifications

• Hands-on experience in application or product security.
• Strong technical depth in modern programming languages (C#, Java, Python).
• Cloud security expertise in Azure and/or AWS.

Responsibilities

• Conduct full-scope security assessments of applications and services.
• Serve as a security thought partner for product architects.
• Own high-impact security projects that shape product security posture.

Skills

Application security

Software development

Cloud security

Communication

Static and dynamic analysis tools

Tools

Atlassian suite

Burp

sqlmap

Job description

Posted Wednesday, April 16, 2025 at 4:00 AM | Expires Tuesday, June 17, 2025 at 3:59 AM

Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region. Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce. Our brand promise - Makes Work Life Better TM - Reflects our commitment to employees, customers, partners and communities globally.

Location: Work is what you do, not where you go. For this role, we are open to remote work and can hire anywhere in the United States or Canada.

About The Opportunity

As an Application Security Engineer, you’ll play a critical role in helping our engineering teams design and build secure, resilient applications. You’ll lead hands-on product security assessments, collaborate on secure architecture and threat modeling, and influence engineering practices to raise the bar for software security across our organization.

What you'll get to do

• Lead product security reviews: Conduct full-scope security assessments of our applications and services—including code reviews, threat modeling, and both dynamic and static analysis. You'll work across teams to identify and mitigate risks early in the development lifecycle.
• Influence architecture and design: Serve as a security thought partner for product architects and engineers. You'll guide threat modeling efforts, assess technical risk, and champion security best practices throughout the SDLC.
• Drive strategic initiatives: Own high-impact security projects that shape the future of our product security posture. Past initiatives have included supply chain security automation, advanced SAST/DAST integrations, and secure development training programs.
• Identify and support remediation of vulnerabilities: Leverage available tools (e.g., static/dynamic analysis, scanning platforms, and internal reports) to investigate security issues, assess root causes, and design effective remediation strategies. Partner closely with engineering teams to provide guidance and support throughout the implementation of fixes, ensuring they align with security best practices.
• Enable engineering teams: Act as an embedded security advocate and collaborator, helping development teams move fast—safely. You'll create guidance, tooling, and processes that make it easier to build secure software.

Skills and Experiences we value

• Hands-on experience in application or product security, with a background in software development
• Strong technical depth, with experience in at least one modern programming language (e.g. C#, Java, Python)
• Cloud security expertise, particularly in Azure and/or AWS, including familiarity with IAM, containerization, networking, and native security controls.
• Proven ability to analyze complex systems and codebases, especially within distributed, microservices-based environments
• Excellent communication skills, with the ability to clearly articulate risk and security trade-offs to technical and non-technical stakeholders
• Experience with static and dynamic analysis tools, Atlassian suite and pentesting tools (Burp, sqlmap)
• Ability to perform black-box and grey-box testing of web applications and APIs

What would make you really stand out

• Prior experience in a SaaS or cloud-native environment
• Familiarity with secure CI/CD practices and software supply chain security
• Experience leading or contributing to secure development lifecycle (SDL) programs
• Contributions to open-source security tools or research
• CISSP, CEH/OSCP certification

What’s in it for you

Dayforce is fueled by the diversity of our talented employees. We are an equal opportunity employer and consider and embrace ALL individuals and what makes them unique. We believe our employees should be happy and healthy, with peace of mind and a sense of fulfillment.

We encourage individuals to apply based on their passions.

Dayforce encourages personal and professional growth. We offer excellent time away from work programs, comprehensive wellness initiatives and recognition through competitive pay and benefits.

With a commitment to community impact, including volunteer days and our charity, Dayforce Cares we provide opportunities for you to thrive both in your career and personal life. Our focus is not just on your job but on supporting you to be the best version of yourself.

About the Salary Ranges

Please note that the salary range mentioned in this job description should serve simply as a guide. The final compensation offered may vary based on a variety of factors, including bonuses and/or incentives, or a candidate’s experience, skills, budget and location. Our company is committed to providing a fair, equitable, and competitive package that reflects the value an individual brings to the organization.

Fraudulent Recruiting

Beware of fraudulent recruiting. Legitimate Dayforce contacts will use an @dayforce.com or @Ceridian.com email address. We do not request money, checks, equipment orders, or sensitive personal data during the recruitment process. If you have been asked for any of the above, or believe you have been contacted by someone posing as a Dayforce employee, please refer to our fraudulent recruiting statement found here:https://www.dayforce.com/be-aware-of-recruiting-fraud