Senior App Sec Engineer: AI-Driven Secure by Design

Openkrill; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Equity for Lightspeed employees

Flexible paid time off

Remote work policies

RRSP / Pension contributions

Wellness benefit

Job summary

Lightspeed is seeking a Senior Application Security/Platform Security professional to operationalize Secure by Design across product teams and pipelines. You will architect threat models, tune SAST/DAST/SCA and LLM scanners, and drive AI-enabled automation to accelerate triage and remediation.

You will partner with Platform and Infrastructure Security to embed guardrails into CI/CD, mentor teams through code remediations, and lead the Security Champions program while contributing to a flexible,

Qualifications

• Bachelor's degree or equivalent practical experience.
• Deep understanding of OWASP Top 10 and secure coding practices.
• Experience tuning SAST/DAST/SCA pipelines in CI/CD.
• Proven threat modeling methodologies and Secure by Design guidance.
• Experience with AI/LLM tools to automate security analyses.

Responsibilities

• Operationalize Secure by Design principles into feature designs and CI/CD.
• Architect threat models for high-impact features and pipelines.
• Configure and tune SAST, DAST, SCA, Secrets, and LLM scanners.
• Build and stabilize AppSec processes and maintain legacy controls.
• Drive AI-driven automation to accelerate vulnerability triage and remediation.
• Provide hands-on fix guidance to developers for security flaws.
• Lead Security Champions program and security workshops.
• Collaborate with Platform and Infra Security to embed guardrails in CI/CD.

Skills

Security engineering

Cloud security

Threat modeling

CI/CD security

AI/LLM in security

Programming (Python/Go/JS)

Education

Bachelor's degree in CS/Cybersecurity/Software Eng

Tools

SAST tooling

DAST tooling

SCA tooling

Secrets scanners

LLM scanner tooling

Job description

Lightspeed is seeking a Senior Application Security/Platform Security professional to operationalize Secure by Design across product teams and pipelines. You will architect threat models, tune SAST/DAST/SCA and LLM scanners, and drive AI-enabled automation to accelerate triage and remediation.

You will partner with Platform and Infrastructure Security to embed guardrails into CI/CD, mentor teams through code remediations, and lead the Security Champions program while contributing to a flexible,