Senior Application Security Analyst

D2l; United States; Hybrid; USD 78,000 - 106,000; Full time

Benefits offered by this job

Wellness Subsidy

Equity Grants

Variable Incentive

Tuition reimbursement

Volunteer days

Benefits Package

Home Internet reimbursement

Employee Referral Program

Wellness Reimbursement

Employee Recognition

Social Events

Dog-friendly offices

Job summary

D2L is seeking a Senior Application Security Analyst to shape and refine the company’s Application Security Program. You will lead security initiatives across endpoints, applications, and infrastructure, working with engineering and operations to reduce risk and improve resilience.

You will perform regular security scans, coordinate remediation with stakeholders, and review third‑party security reports to ensure alignment with standards such as ISO 27001/NIST.

Qualifications

• Hands-on experience reviewing code and implementing security controls across multiple domains.
• Experience with SAST/DAST/SCA and vulnerability assessments.
• Proficiency with public cloud services (AWS/Azure) and serverless environments.
• Ability to engage stakeholders and translate security concepts for diverse audiences.

Responsibilities

• Refine and deliver the company's Application Security Program focusing on endpoints, applications, and underlying infrastructure.
• Collaborate with operational teams on security risks and provide SME input.
• Perform regular security scans and coordinate remediation with stakeholders.
• Triage third-party assessments and track issues through remediation lifecycle.
• Review third-party reports for alignment with the security program.
• Support security assessments, audits, and evidence collection.

Skills

Code review

Endpoint Security

Cloud security

Vulnerability testing

Red Team experience

GRC tools

ISO/NIST/PCI guidance

Stakeholder engagement

Tools

AWS

Azure

GRC tools

Job description

the company is a cloud company that is modernizing education and building the Future of Work. The old models of teaching and learning are in the midst of the largest transformation in history, and the company is at the heart of that fundamental shift.

New models of teaching and learning enable a personalized, student-centric experience – and deliver improved retention, engagement, satisfaction, and results for learners of all ages – in schools, campuses, and companies.

the company is disrupting the way the world learns, by providing the next generation learning environment and solutions to engage and inspire learners. And most importantly, by giving customers a platform that is easy, flexible, and smart. No other company provides a solution as robust and innovative as the company.

the company has had a singular mission for 25 years and is dedicated to that same mission in the years ahead: to transform the way the world learns – and by doing so, we will help improve human potential globally.

Every application we receive is personally reviewed by a member of our Talent Acquisition team - yes, a real person looks at your resume! While we use AI tools internally to streamline tasks like meeting notes, summaries, and administrative work, these tools never rank resumes, make hiring decisions, or influence candidate evaluations.

As Senior Application Security Analyst at the company, you are a key influencer and contributor to the refinement and delivery of the company's Application Security Program.

How will I make an Impact?

• Assist in refining and delivering the company's Application Security Program with particular focus on endpoints, applications, and the underlying infrastructure.
• Collaborate with operational teams on existing and emerging security risks and provide subject matter expertise.
• Perform regular security scans and coordinate with stakeholders to address open issues
• Triage third-party assessments and follow up with stakeholders to address issues
• Monitor/track security risks and related artifacts throughout their lifecycle
• Support internal the company teams during security assessments/reviews/audits
• Review independent third-party reports from vendors, suppliers and partners for alignment with the company’s Application Security Program

What you’ll bring to the role:

Competencies:

• Ability to engage process owners and explain security controls associated with processes
• Ability to break down complex technical concepts to simple terms for various levels of stakeholders
• Ability to work independently
• Ability to learn fast and synthesize information from different domains and sources.
• Ability to work well with a wide cross-section of engineering and operational teams

Suggested Qualifications/Experience:

• You have practical programming experience and are proficient at reviewing code in a variety of languages
• You have previous hands‑on experience implementing information security controls across a wide range of domains including Endpoint Security, Application Security, and Infrastructure Security. (SAST, DAST, SCA)
• You have hands‑on experience with public cloud services like AWS or Azure etc.
• You have hands‑on experience performing vulnerability assessments and penetration tests.
• Having both Red Team and Blue Team experience is a strong plus.
• You have demonstrable experience working with teams that have implemented security controls based on ISO 27001/NIST 800‑53, PCI‑DSS, PBMM
• You have experience using enterprise‑grade governance risk and compliance (GRC) tools.
• You have experience assessing security control implementations on large enterprises, web scale and serverless environments.
• You have experience engaging stakeholders in remediating security‑related findings
• You have experience supporting an audit exercise by generating security‑related evidence

This position is to fill an existing vacancy

The expected base salary range for a new hire in this role is listed below. The annualized base salary offered is determined by each candidate’s relevant knowledge, skills, education, training and experience. It is aligned to ensure both internal and external competitiveness using market data for the geographic location and industry. As part of the total compensation at the company the role may be eligible for additional benefits including a Wellness Subsidy, Equity Grants, Variable Incentive, and more.

Base Salary Range

$110,000—$150,000 CAD

Don’t meet every single requirement? We strongly encourage you to still apply! At the company, we are committed to creating a diverse and inclusive environment. We encourage your application even if you don't believe you meet every single qualification outlined, because we love to help our people grow and develop!

Why we’re awesome:

At the company, we are dedicated to providing you with the tools to do the best work of your life. While some of our perks and benefits may vary depending on location or employment type, we are proud to provide employees with the following through #LifeAtD2L:

• Impactful work transforming the way the world learns
• Flexible work arrangements
• Learning and Growth opportunities
• Tuition reimbursement of up to $4,000 CAD for continuing education through our SkillsWave Program
• 2 Paid Days off for SkillsWave-related activities like exams or final assignments
• Employee wellbeing (Access to mental health services, EFAP program, financial planning and more)
• Retirement planning
• 2 Paid Volunteer Days
• Competitive Benefits Package
• Home Internet Reimbursements
• Employee Referral Program
• Wellness Reimbursement
• Employee Recognition
• Social Events
• Dog Friendly Offices Spaces at our HQ in Kitchener, Winnipeg, Vancouver and Melbourne offices.