Senior Analyst, Application Security

Dragonfly Logistics Lab Inc.; Montreal; On-site; CAD 120,000 - 160,000; Full time

Benefits offered by this job

On-site gym

Lunch provided

Group insurance

RRSP plan

Care & Well-being

Transit reimbursement

Employee Assistance Program

Job summary

Intelcom | Dragonfly is seeking a seasoned Application Security expert to define and enforce secure software development practices across our ecosystems. You will lead threat modeling, security testing, and guardrail development across CI/CD pipelines, cloud workloads, APIs, and containerized environments.

Collaborate with engineering, product, and cybersecurity teams to implement robust security features, patterns, and documentation.

Qualifications

• Broad knowledge of application security, secure software development, application testing methodologies, secure coding, and secure product design.
• Strong understanding of modern application architectures, APIs, web services, and associated security risks.
• Strong knowledge of threat modeling and secure design methodologies.
• Working knowledge of cloud security concepts and controls in Azure and/or AWS as they relate to application workloads.
• Working knowledge of security automation with scripting languages such as Python and Bash.
• Knowledge of one or more development languages such as Java, Node.js, C#, or .NET.
• Knowledge of information security risk, security frameworks, regulatory requirements, and industry best practices.
• Strong problem-solving, communication, stakeholder management, and time-management skills.
• Hands-on experience with application security testing, implementation of secrets management solutions and CI/CD, container, API, serverless security controls.

Responsibilities

• Act as a subject matter expert on secure software development practices.
• Define, implement, and continuously improve application security controls, standards, guardrails, and baseline configurations.
• Assess effectiveness of controls across CI/CD pipelines and application platforms (web, mobile, APIs, containers, desktop apps, and COTS).
• Lead threat modeling and secure design activities and provide remediation recommendations.
• Own and improve application security services and tooling, including selection, onboarding, configuration, optimization, testing, and lifecycle management.
• Lead application security testing activities (manual, automated) and remediation.
• Drive security automation and repeatable controls throughout the software development lifecycle.
• Partner with engineering, product, platform, architecture, and cybersecurity teams to design and implement security features.
• Create and maintain application security guidance, secure patterns, training materials, and documentation.
• Host training sessions, knowledge-sharing forums, and drive application security community of practice.
• Provide training on API, web, mobile and application security principles and risks.
• Make decisions on complex issues and provide direction aligned with best practices.
• Deliver outcomes with autonomy and practical recommendations on complex security matters.

Skills

Application security

Threat modeling

CI/CD security

Cloud security (Azure/AWS)

Python/Bash scripting

Secure coding

Communication & stakeholder mgmt

Security testing (manual/ automated)

Education

Degree in computer science or related field

Security certifications (CISSP/CSSLP/CEH/OSCP/GIAC)

Cloud security certifications asset

Tools

Python

Bash

Azure

AWS

CI/CD tooling

Job description

Intelcom | Dragonfly

With more than 100 sorting stations and operations across three continents, Intelcom | Dragonfly is Canada’s leader in last-mile logistics. Our vision is clear: to deliver fast, accurate, and reliable service powered by cutting-edge technology.

A Strategic Role at the Heart of Logistic

Key Responsibilities

• Act as a subject matter expert on secure software development practices.
• Define, implement, and continuously improve application security controls, standards, guardrails, and baseline configurations.
• Assess the effectiveness of controls across CI/CD pipelines and application platforms, including web, mobile, APIs, containers, desktop applications, and Commercial Off-The-Shelf solutions.
• Lead threat modeling and secure design activities and provide technical recommendations on remediation approaches and security patterns.
• Own and continuously improve application security services and tooling, including selection, onboarding, configuration, optimization, testing, and lifecycle management.
• Lead application security testing activities (manual, automated) and remediation activities
• Drive security automation and repeatable controls implementation throughout the software development lifecycle.
• Partner with engineering, product, platform, architecture, and cybersecurity teams to design and implement appropriate security features and patterns.
• Create and maintain application security guidance, secure patterns, training materials, and technical documentation.
• Host training sessions, knowledge-sharing forums, and drive application security community of practice
• Provide training, coaching on API, web, mobile and application security principles and risks.
• Make decisions on complex issues and provide direction aligned with application security best practices
• Deliver outcomes with a high degree of autonomy and provide practical recommendations on complex application security matters.

Required Skills & Experience

• Broad knowledge of application security, secure software development, application testing methodologies, secure coding, and secure product design.
• Strong understanding of modern application architectures, APIs, web services, and associated security risks.
• Strong knowledge of threat modeling and secure design methodologies.
• Working knowledge of cloud security concepts and controls in Azure and/or AWS as they relate to application workloads.
• Working knowledge of security automation with scripting languages such as Python and Bash.
• Knowledge of one or more development languages such as Java, Node.js, C#, or .NET.
• Knowledge of information security risk, security frameworks, regulatory requirements, and industry best practices.
• Strong problem-solving, communication, stakeholder management, and time-management skills.
• Hands-on experience with application security testing, implementation of secrets management solutions and CI/CD, container, API, serverless security controls.

Qualifications

Degree in computer science or a related field, with 5 to 10+ years of relevant experience in IT, application security, or an equivalent combination of education and experience.

Relevant security certification(s), such as CISSP, CSSLP, CEH, OSCP, or GIAC, or demonstrated equivalent security knowledge and experience.

Cloud or vendor-specific security certification(s), or demonstrated equivalent knowledge and experience, are considered an asset.

Why Join Us?

At Intelcom | Dragonfly, you'll thrive in a flexible and stimulating environment, surrounded by passionate talent.

• On-site gym with a personal trainer
• Employer-provided lunch of your choice
• Comprehensive group insurance
• Group RRSP plan
• Care & Well-BEING Activities
• Partial reimbursement for public transportation
• Employee Assistance Program …and much more.

This position has been opened to address a genuine organizational need within the company.

Why Work With Us

Make an Impact Every package delivered represents a promise kept to customers, businesses, and communities.

Keep Growing Build new skills, gain hands-on experience, and take on meaningful challenges.

Work as One Team Join a collaborative environment where people support one another, share ideas and celebrate success together.

Shape What's Next Bring forward ideas that improve how we operate, innovate, and deliver a better experience every day.

Experience Life at Intelcom

See What's It's Like to Work Here Discover the people, teams, and opportunities behind our operations.

Inside Our Delivery Centres Experience a Tech Internship Explore Career Paths Find the Opportunity That's Right for You Students Launch your career with meaningful projects, mentorship, and hands-on experience.

Delivery Centres Careers Help power the operations that keep our network moving every day.

Head Office Careers Support innovation, technology, people, strategy, and business growth.

Diversity, Equity, and Inclusion

At Intelcom | Dragonfly, we move forward guided by strong values: collaboration, innovation, excellence, and responsibility.

We embrace diversity, ensure equity, and foster a true sense of belonging.

Accommodation measures are available for individuals with disabilities throughout our recruitment process, in compliance with the law. Please let us know if you have any specific needs.

At Intelcom | Dragonfly, we move forward guided by strong values: customer focus, teamwork, diligence, and innovation. We embrace diversity, ensure equity, and foster a true sense of belonging.

Need Accommodations? Accommodation measures are available throughout the recruitment process in accordance with applicable legislation. If you require support at any stage, please let us know.