Senior Specialist, Application Security

Loblaw Companies Limited; Brampton; On-site; CAD 90,000 - 110,000; Full time

Job summary

A leading Canadian retailer in Brampton is seeking an experienced Senior Specialist, Application Security to drive secure development initiatives. The ideal candidate will excel in SAST, DAST, and API security and will guide the team through vulnerability discovery and SDLC implementation. This role offers an opportunity to impact security practices within a diverse and inclusive team.

Benefits

Work Perks Program

On-site Gym

Tuition Reimbursement

Pension & Benefits

Paid Vacation

Qualifications

• Strong experience in Application Security.
• Deep understanding of Web, API, and Mobile security testing methodologies.
• Experience managing bug bounty or red team programs.

Responsibilities

• Own and enhance the application security program across SAST, DAST, SCA, and secrets scanning tools.
• Drive the shift-left strategy by embedding security into every phase of the SDLC.
• Perform and review penetration tests on web, mobile, and API applications aligned with OWASP standards.

Skills

SAST

DAST

SCA

CI/CD security

API security

Penetration testing

Red teaming

Cloud security

Communication skills

Education

Bachelor’s/Master’s degree in Computer Science, Cybersecurity, or related field

Tools

Azure DevOps

GitLab

Jenkins

Burp Suite

Veracode

SonarQube

Job description

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued – as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®. At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.

Does working with some of Canada’s most talented minds in innovation supporting retail, digital consumer solutions and analytical platforms excite you? Loblaw Technology powers some of Canada’s most game-changing retail solutions, giving our customers the ability to live their lives well.

Come work with a team that values diverse ideas, fosters a culture of inclusion and develops our talent from within. Loblaw Technology gives you the chance to excel, and helps you to strive for success in a big way. Keep reading to learn more!

Senior Specialist, Application Security, Brampton, ON

We are seeking an experienced and technically strong Senior Specialist, Application Security to drive secure development initiatives across our organization. The ideal candidate will have deep expertise in SAST, DAST, SCA, CI/CD security, and API security, along with hands-on experience in penetration testing, red teaming, and AI/ML security applications.

The role requires a blend of technical depth, leadership, and innovation, guiding the team through vulnerability discovery, secure SDLC implementation, automation of AppSec pipelines, and the integration of AI-driven security solutions.

What You’ll Do:

• Own and enhance the application security program across SAST, DAST, SCA, and secrets scanning tools. Manage tool integrations and findings triage in Azure DevOps, GitLab, and Jenkins CI/CD pipelines.
• Drive the shift-left strategy — embedding security into every phase of the SDLC.
• Design and implement threat modeling, secure code review, and vulnerability remediation frameworks.
• Perform and review penetration tests on web, mobile, and API applications aligned with OWASP Top 10 and OWASP API Top 10.
• Utilize advanced security tools like Veracode, Burp Suite, Netsparker, Trivy, SonarQube, GitGuardian, etc.
• Manage and monitor API security using platforms like Akamai, Noname Security, Salt, or 42Crunch.
• Maintain a strong red team mindset to simulate real-world attack scenarios and improve detection resilience.
• Manage and oversee bug bounty programs (e.g., HackerOne, Bugcrowd, Synack).
• Validate and triage reports, ensuring high-impact vulnerabilities are prioritized.
• Establish KPIs and dashboards for vulnerability trends and researcher engagement.
• Maintain alignment with OWASP ASVS, NIST 800-53, ISO 27001, and PCI DSS standards.
• Ensure reporting and documentation of AppSec metrics for internal and executive stakeholders.
• Lead internal awareness and training sessions for developers and product teams.

What You Bring

• Bachelor’s/Master’s degree in Computer Science, Cybersecurity, or related field.
• Strong experience in Application Security
• Strong proficiency with SAST, DAST, SCA, and secrets scanning tools.
• Hands-on experience with CI/CD platforms – Azure DevOps, GitLab, Jenkins, GitHub Actions, etc.
• Deep understanding of Web, API, and Mobile security testing methodologies.
• Working knowledge of container and cloud security (Docker, Kubernetes, AWS, Azure).
• Experience managing bug bounty or red team programs.
• Strong communication skills for cross-functional and executive-level interaction.
• Certifications preferred: CISSP, CCSP, CISM

What Loblaw Offers You

We offer flexibility and balance, and an environment that sets you up for success no matter where your workspace is located.

Here, you will find a great team to help you achieve your goals as you help us achieve ours! Work in our fast-paced, exciting Technology environment, helping our stores, colleagues and customers every day.

Loblaw colleagues also enjoy:

• Work Perks Program
• On-site Gym, Basketball & Volleyball courts, Dry Cleaning services (1PCC Office)
• Tuition Reimbursement & Online Learning
• Pension & Benefits
• Paid Vacation

If you’re up to the challenge, then we would love to hear from you. Apply today, and get the process started.

Loblaw recognizes Canada’s diversity as a source of national pride and strength. We have made it a priority to reflect our nation’s evolving diversity in the products we sell, the people we hire, and the culture we create in our organization. At Loblaw, we celebrate diversity and strive to build a culture of inclusion where differences are embraced, valued and supported. We are committed to being an equal opportunity employer and encourage people from all backgrounds and identities to apply to our jobs. Accommodation in the recruitment, assessment, and hiring process is available upon request for applicants with disabilities.

We thank all candidates for their interest but please note, those candidates who meet the minimum requirements for the position will be contacted.

We have a long-standing focus on diversity, equity and inclusion because we know it will make our company a better place to work and shop. We are committed to creating accessible environments for our colleagues, candidates and customers. Requests for accommodation due to a disability can be made at any stage of application and employment. We encourage candidates to make their accommodation needs known so that we can provide equitable opportunities.

Please Note: Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.

www.Loblaw.ca/careers

Our commitment to Sustainability and Social Impact is an essential part of the way we do business. Our three pillars are Environment, Sourcing and Community, and we strive to demonstrate leadership in these areas. Our CORE Values – Care, Ownership, Respect and Excellence – guide our decisions and come to life through our Blue Culture. We offer progressive careers, comprehensive training, flexibility, and other competitive benefits.

If you are unsure whether your experience matches every requirement above, we encourage you to apply anyway. We are looking for varied perspectives from diverse experiences to join our team. We have a long-standing focus on diversity, equity and inclusion and are committed to accessible environments for colleagues, candidates and customers. Requests for accommodation due to a disability can be made at any stage of application and employment.

Please Note: Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.