Senior AppSec Engineer: AI-Driven Secure by Design

Lightspeed Commerce, Inc.; Calgary; Híbrido; CAD 140 000 - 185 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity scheme

Flexible PTO

Health insurance

RRSP pension

Wellness benefit

Parental leave

Mental health services

Training opportunities

Volunteer day

Fully stacked kitchen

Resumo da oferta

Lightspeed Commerce, Inc. is seeking a Senior Application Security Engineer to anchor the AppSec team, embedding Secure by Design into feature design, PRs, and IaC checks.

You will architect threat models for features and infrastructure and tune SAST/DAST/SCA/Secrets/LLM pipelines to streamline remediation while guiding developers through complex fixes. You will push AI-driven automation to accelerate triage, champion the Security Champions program, and collaborate with Platform/Infra Security

Qualificações

• Deep hands-on experience in Application Security, Product Security, or Secure Software Engineering in cloud environments.
• Bachelor's degree in CS, cybersecurity, or software engineering, or equivalent practical experience.
• Deep understanding of web application vulnerabilities (OWASP Top 10) and secure coding practices.
• Proven ability tuning SAST, DAST, SCA, Secrets, and LLM scanners in CI/CD.
• Threat modeling methodologies, Secure by Design principles, and guiding developers through remediations.
• Experience leveraging AI/LLM tools to automate security analyses and accelerate triage.
• Fluency in modern languages (Python, Go, JavaScript/TypeScript, Java).
• Excellent cross-functional influence and communication to lead Security Champions.

Responsabilidades

• Operationalize Secure by Design principles end-to-end in design, PRs, IaC checks, and daily workflows.
• Architect threat models for features and infra; validate AI-generated threat pipelines.
• Configure and tune SAST, DAST, SCA, Secrets, and LLM rulesets to minimize false positives.
• Build and stabilize new AppSec processes while keeping legacy controls active.
• Pilot AI-driven automation to accelerate vulnerability triage and remediation.
• Provide hands-on fix guidance to developers for complex flaws and web vulnerabilities.
• Lead Security Champions program and deliver secure-coding workshops across the org.
• Collaborate with Platform/Infra Security to embed guardrails in CI/CD pipelines.

Conhecimentos

AppSec leadership

Secure by Design

Threat modeling

SAST

DAST

SCA

Secrets management

LLM/AI tooling

CI/CD security

Python

Go

JavaScript/TypeScript

Java

Cross-functional influence

Formação académica

Bachelor's degree in Computer Science, Cybersecurity, or Software Engineering

Ferramentas

CI/CD tooling

AI/LLM security tools

Descrição da oferta de emprego

Lightspeed Commerce, Inc. is seeking a Senior Application Security Engineer to anchor the AppSec team, embedding Secure by Design into feature design, PRs, and IaC checks.

You will architect threat models for features and infrastructure and tune SAST/DAST/SCA/Secrets/LLM pipelines to streamline remediation while guiding developers through complex fixes. You will push AI-driven automation to accelerate triage, champion the Security Champions program, and collaborate with Platform/Infra Security