Senior Application Security Analyst (Hybrid, Growth & Equity)

D2L; Kitchener; Hybrid; CAD 100,000 - 130,000; Full time

Benefits offered by this job

Wellness Subsidy

Equity Grants

Variable Incentive

Tuition reimbursement

Flexible work arrangements

2 Paid Volunteer Days

Retirement planning

Home Internet Reimbursement

Employee Referral Program

Wellness Reimbursement

Dog Friendly Offices

Job summary

D2L is seeking an Information Security professional to refine and deliver the Application Security Program across endpoints, applications, and infrastructure. You will conduct regular security scans and collaborate with stakeholders to remediate issues, while guiding teams on risk and controls.

You will review third-party reports, support audits, and engage with engineering and operations to strengthen security in cloud and serverless environments. Hybrid work with 3 days in office in Canada.

Qualifications

• Proven track record implementing information security controls across Endpoint, Application and Infrastructure domains.
• Experience with public cloud services (AWS or Azure).
• Experience performing vulnerability assessments and penetration testing.
• Experience working with ISO 27001/NIST 800-53, PCI-DSS.
• Experience with governance, risk and compliance (GRC) tools.
• Experience assessing security control implementations in large enterprises and serverless environments.

Responsibilities

• Refine and deliver D2L's Application Security Program focusing on endpoints, applications, and underlying infrastructure.
• Perform regular security scans and coordinate with stakeholders to address issues.
• Collaborate with operational teams on security risks and provide SME guidance.
• Triage third-party assessments and follow up with stakeholders on remediation.
• Monitor security risks throughout their lifecycle and support audits and security reviews.
• Review independent third-party reports for alignment with the program.

Skills

Explain security controls

Break down tech concepts

Independent worker

Fast learner

AI tools awareness

Collaborate with engineers

Code review

InfoSec controls

Cloud security

Vulnerability assessments

Education

ISO 27001/NIST 800-53 / PCI-DSS familiarity

Tools

GRC tools

AWS / Azure

SAST

DAST

SCA

Job description

D2L is seeking an Information Security professional to refine and deliver the Application Security Program across endpoints, applications, and infrastructure. You will conduct regular security scans and collaborate with stakeholders to remediate issues, while guiding teams on risk and controls.

You will review third-party reports, support audits, and engage with engineering and operations to strengthen security in cloud and serverless environments. Hybrid work with 3 days in office in Canada.