Technical lead, Application Security & Penetration Testing

Loblaw Companies Limited; Brampton; On-site; CAD 100,000 - 130,000; Full time

Job summary

A leading Canadian retailer is seeking an experienced security professional to lead Application Security and build secure pipelines. The role involves collaborating with developers and data scientists to maximize AI safety and mitigate risks. A strong foundation in security tools and hands-on experience with GenAI is essential. Join a diverse team and enjoy a flexible working environment with excellent perks, including tuition reimbursement and paid vacation.

Benefits

Work Perks Program

On-site Gym

Tuition Reimbursement

Pension & Benefits

Paid Vacation

Qualifications

• Proven experience with SAST, DAST, SCA, and API security tools.
• Hands-on experience with GenAI tools for automating security workflows.
• Solid understanding of ML security concepts like model evasion and poisoning.

Responsibilities

• Lead AppSec in building secure pipelines.
• Design and deploy intelligent automation for security tools.
• Conduct penetration testing on AI-based applications.

Skills

Application Security

GenAI tools

ML security concepts

Python

Collaboration skills

Tools

OpenAI APIs

Hugging Face

PyTorch

TensorFlow

Job description

Overview

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued – as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®. At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong. Does working with some of Canada’s most talented minds in innovation supporting retail, digital consumer solutions and analytical platforms excite you? Loblaw Technology powers some of Canada’s most game-changing retail solutions, giving our customers the ability to live their lives well. Come work with a team that values diverse ideas, fosters a culture of inclusion and develops our talent from within. Loblaw Technology gives you the chance to excel, and helps you to strive for success in a big way. Keep reading to learn more!

What You’ll Do

• Lead AppSec in building Secure pipelines, building GenAI-powered tools and workflows to automate code review, threat modeling, misconfiguration detection, and incident response.
• Design and deploy intelligent automation for SAST, DAST, SCA, IaC, and secret scanning tools across CI/CD pipelines to reduce false positives and accelerate triage.
• Conduct targeted penetration testing and red teaming on AI-based applications and APIs to uncover logic flaws, adversarial ML threats, or model leakage.
• Develop and maintain AI-driven security dashboards and bots that proactively flag risks, summarize findings, and support security decision-making in real-time.
• Stay ahead of CVEs, adversarial AI risks, model poisoning attacks, and emerging threats in the AI/ML landscape.
• Collaborate with developers, data scientists, MLOps, and product teams to secure AI models, pipelines, APIs, and data endpoints end-to-end.
• Act as a security evangelist for GenAI use in security, creating internal playbooks, POCs, and best practices.

What You Bring

• Strong foundation in Application Security with proven experience across SAST, DAST, SCA, and API security tools.
• Hands-on experience with GenAI tools (e.g., OpenAI APIs, LangChain, LLMOps frameworks) and their use in automating security workflows or risk analysis.
• Solid understanding of ML security concepts like model evasion, poisoning, prompt injection, LLM misuse, and defense strategies.
• Proficiency in Python and familiarity with libraries like Hugging Face, PyTorch/TensorFlow, and LangChain for building AI/ML integrations.
• Demonstrated ability to build or fine-tune LLMs or integrate AI agents within DevSecOps workflows.
• Excellent collaboration and communication skills to bridge gaps between security, engineering, and AI teams.

What Loblaw Offers You

We offer flexibility and balance, and an environment that sets you up for success no matter where your workspace is located. Here, you will find a great team to help you achieve your goals as you help us achieve ours! Work in our fast-paced, exciting Technology environment, helping our stores, colleagues and customers every day.

Loblaw colleagues also enjoy:

• Work Perks Program
• On-site Gym, Basketball & Volleyball courts, Dry Cleaning services (1PCC Office)
• Tuition Reimbursement & Online Learning
• Pension & Benefits
• Paid Vacation

If you’re up to the challenge, then we would love to hear from you. Apply today, and get the process started.

Diversity, Inclusion & Accessibility

Loblaw recognizes Canada's diversity as a source of national pride and strength. We are committed to being an equal opportunity employer and encourage people from all backgrounds and identities to apply. Accommodation in the recruitment, assessment, and hiring process is available upon request for applicants with disabilities.

We thank all candidates for their interest; those who meet the minimum requirements will be contacted. Please note: Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.

Careers: www.Loblaw.ca/careers