Senior App Security Analyst: Secure SDLC & Threat Modeling

Qwalton; Mississauga; On-site; CAD 90,000 - 130,000; Full time

Job summary

Qwalton is seeking an experienced security professional in Canada to lead secure software delivery and developer enablement. The role focuses on governance of Secure SDLC, threat modeling, and applying SAST/DAST/SCA tools to reduce application risk.

The candidate should have 5+ years of experience in application security, capable of translating findings into actionable guidance for developers and coordinating remediation across teams.

Qualifications

• Implement and govern Secure SDLC practices.
• Perform application security assessments and code review.
• Lead or support threat modeling.
• Operate or interpret SAST, DAST, SCA, and secrets-scanning capabilities.
• Provide developer security training and promote secure coding practices.

Responsibilities

• Coordinate vulnerability management and remediation across application teams.
• Translate findings into actionable guidance for developers.
• Understand both technical application risk and the software delivery lifecycle.
• Help teams fix issues rather than only identifying them.

Skills

Secure SDLC

Threat modeling

Code review

Developer security training

Tools

SAST

DAST

SCA

Secrets scanning

Job description

Qwalton is seeking an experienced security professional in Canada to lead secure software delivery and developer enablement. The role focuses on governance of Secure SDLC, threat modeling, and applying SAST/DAST/SCA tools to reduce application risk.

The candidate should have 5+ years of experience in application security, capable of translating findings into actionable guidance for developers and coordinating remediation across teams.