Senior Application Security Analyst - Flexible, Growth

D2l; United States; Hybrid; USD 78,000 - 106,000; Full time

Benefits offered by this job

Wellness Subsidy

Equity Grants

Variable Incentive

Tuition reimbursement

Volunteer days

Benefits Package

Home Internet reimbursement

Employee Referral Program

Wellness Reimbursement

Employee Recognition

Social Events

Dog-friendly offices

Job summary

D2L is seeking a Senior Application Security Analyst to shape and refine the company’s Application Security Program. You will lead security initiatives across endpoints, applications, and infrastructure, working with engineering and operations to reduce risk and improve resilience.

You will perform regular security scans, coordinate remediation with stakeholders, and review third‑party security reports to ensure alignment with standards such as ISO 27001/NIST.

Qualifications

• Hands-on experience reviewing code and implementing security controls across multiple domains.
• Experience with SAST/DAST/SCA and vulnerability assessments.
• Proficiency with public cloud services (AWS/Azure) and serverless environments.
• Ability to engage stakeholders and translate security concepts for diverse audiences.

Responsibilities

• Refine and deliver the company's Application Security Program focusing on endpoints, applications, and underlying infrastructure.
• Collaborate with operational teams on security risks and provide SME input.
• Perform regular security scans and coordinate remediation with stakeholders.
• Triage third-party assessments and track issues through remediation lifecycle.
• Review third-party reports for alignment with the security program.
• Support security assessments, audits, and evidence collection.

Skills

Code review

Endpoint Security

Cloud security

Vulnerability testing

Red Team experience

GRC tools

ISO/NIST/PCI guidance

Stakeholder engagement

Tools

AWS

Azure

GRC tools

Job description

D2L is seeking a Senior Application Security Analyst to shape and refine the company’s Application Security Program. You will lead security initiatives across endpoints, applications, and infrastructure, working with engineering and operations to reduce risk and improve resilience.

You will perform regular security scans, coordinate remediation with stakeholders, and review third‑party security reports to ensure alignment with standards such as ISO 27001/NIST.