Senior AppSec Analyst — Cloud, Code & Risk Leader

Jobgether; Canada; Hybrid; CAD 140,000 - 175,000; Full time

Benefits offered by this job

Flexible work arrangements

Wellness subsidy

EFAP and mental health services

Retirement planning

Tuition reimbursement CAD 4,000

Paid SkillsWave days

Volunteer days

Employee referral program

Dog-friendly office spaces in Canada

Job summary

Jobgether represents a partner company in Canada seeking a Senior Application Security Analyst. You will strengthen application security across cloud platforms, endpoints, and infrastructure, delivering an effective program and driving remediation with engineering and operations teams.

The role blends hands-on testing with governance and audits, requiring experience with SAST/DAST/SCA, AWS/Azure, and security frameworks.

Qualifications

• Practical programming experience and proficiency in reviewing code across multiple programming languages.
• Hands-on experience implementing information security controls across endpoint, application, and infrastructure security domains.
• Familiarity with application security testing methodologies and tools, including SAST, DAST, and SCA.
• Hands-on experience with public cloud services such as AWS or Azure.
• Experience conducting vulnerability assessments and penetration tests.
• Experience with frameworks and standards such as ISO 27001, NIST 800-53, PCI-DSS, or PBMM.
• Familiarity with enterprise-grade Governance, Risk, and Compliance (GRC) tools.
• Experience assessing security control implementations in large enterprise, web-scale, and serverless environments.
• Proven ability to engage stakeholders and coordinate remediation of security findings.
• Experience supporting audits by providing security-related evidence.
• Strong communication skills; able to explain complex concepts to varied audiences.
• Ability to engage process owners and explain security controls related to business processes.
• Ability to work independently and synthesize information from multiple domains.
• Strong collaboration with engineering and operations teams.
• Red Team and Blue Team experience is a strong advantage.

Responsibilities

• Contribute to development and delivery of the application security program across the organization.
• Refine and implement application security practices for endpoints, applications, and infrastructure.
• Assess and address security risks with engineering and operations teams.
• Coordinate remediation efforts and periodic security assessments and audits.
• Review third-party security assessments and ensure findings are addressed.
• Track security risks and maintain audit-ready documentation.
• Engage stakeholders in remediation activities and provide security evidence for audits.
• Translate technical findings into practical security improvements for the program.
• Support governance, risk, and compliance activities across enterprise environments.

Skills

Code review across languages

Application security testing

Cloud security

Security governance & risk

Stakeholder communication

Threat modeling

Vulnerability management

Tools

SAST tools

DAST tools

SCA tools

AWS

Azure

GRC tools

Job description

Jobgether represents a partner company in Canada seeking a Senior Application Security Analyst. You will strengthen application security across cloud platforms, endpoints, and infrastructure, delivering an effective program and driving remediation with engineering and operations teams.

The role blends hands-on testing with governance and audits, requiring experience with SAST/DAST/SCA, AWS/Azure, and security frameworks.