Senior Application Security Analyst - Flexible, Impactful

D2l; Kitchener; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Wellness Subsidy

Equity Grants

Variable Incentive

Tuition reimbursement

Job summary

D2L, a cloud company modernizing education, seeks a Senior Application Security Analyst to strengthen its Application Security Program across endpoints, apps, and infrastructure. You will collaborate with operational teams, perform security scans, triage third-party assessments, and drive remediation with stakeholders.

You bring hands-on experience in SAST/DAST/SA, cloud platforms (AWS/Azure), vulnerability testing, and a track record with ISO 27001/NIST 800-53, PCI-DSS.

Qualifications

• Hands-on security experience across Endpoint, Application and Infrastructure domains.
• Experience implementing information security controls including SAST/DAST/SCA.
• Experience with public cloud services (AWS, Azure).
• Experience performing vulnerability assessments and penetration tests.
• Red Team and Blue Team experience is a plus.
• Experience with ISO 27001 / NIST 800-53, PCI-DSS, PBMM.
• Experience using enterprise-grade GRC tools.
• Experience assessing security control implementations in large enterprises, web-scale, serverless environments.
• Experience engaging stakeholders to remediate security findings.
• Experience supporting audits with security evidence.

Responsibilities

• Refine and deliver D2L's Application Security Program focusing on endpoints, apps, and underlying infrastructure.
• Collaborate with operational teams on security risks and provide SME guidance.
• Perform regular security scans and coordinate remediation with stakeholders.
• Triage third-party assessments and address issues with stakeholders.
• Monitor security risks and artifacts throughout their lifecycle.
• Support internal teams during security assessments, reviews, and audits.
• Review third-party reports for alignment with the security program.

Skills

Programming experience

Security concepts

Independent worker

Cross-functional collaboration

Explain security controls

Tools

AWS

Azure

SAST

DAST

SCA

Job description

D2L, a cloud company modernizing education, seeks a Senior Application Security Analyst to strengthen its Application Security Program across endpoints, apps, and infrastructure. You will collaborate with operational teams, perform security scans, triage third-party assessments, and drive remediation with stakeholders.

You bring hands-on experience in SAST/DAST/SA, cloud platforms (AWS/Azure), vulnerability testing, and a track record with ISO 27001/NIST 800-53, PCI-DSS.