Senior AppSec Engineer – AI-Driven, Remote

Jobicy; United States; A distancia; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity

Flexible time off

Health insurance

RRSP contributions

Wellness benefit

Parental leave

Mental health resources

Training opportunities

Volunteer day

Fully stocked kitchen

Happy hours

Descripción de la vacante

Lightspeed is seeking an experienced Application Security professional to operationalize Secure by Design across product and infrastructure, embedding security into design, code and deployment pipelines. You will model threats, tune SAST/DAST/LLM scanners, and drive AI-enabled vulnerability triage with cross‑functional teams.

The role emphasizes hands‑on remediation guidance, security enablement programs, and collaboration with Platform and Infra Security to automate guardrails in CI/CD

Formación

• Hands-on experience in Application Security, Product Security, or Secure Software Engineering in cloud environments.
• Bachelor’s degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.
• Deep understanding of web app vulnerabilities (OWASP Top 10), business logic flaws, and secure coding.
• Proven track record tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines in CI/CD.
• Experience with threat modeling methodologies, Secure by Design, and guiding developers through remediations.
• Proven experience leveraging AI/LLM tools to automate security analyses and accelerate triage.
• Fluency in Python, Go, JavaScript/TypeScript, or Java and strong cross-functional communication.

Responsabilidades

• Operationalize Secure by Design principles end-to-end, embedding security controls into feature designs, PRs, IaC checks, and daily workflows.
• Architect high-impact feature and infrastructure threat models, validating AI-generated threat modeling pipelines.
• Configure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to reduce false positives.
• Build and stabilize new AppSec processes while keeping legacy security controls active.
• Pioneer AI-driven automation to accelerate vulnerability triage and remediation, reducing backlogs.
• Provide hands-on technical fix guidance to developers for complex vulnerabilities.
• Drive security enablement across the org and lead the Security Champions program with workshops.
• Partner with Platform and Infrastructure Security to automate guardrails in CI/CD pipelines.

Conocimientos

Application Security

Secure Software Eng

Threat Modeling

CI/CD Security

AI/LLM Security

Python/Go/JS

Communication

Educación

Bachelor's degree

Herramientas

SAST

DAST

SCA

Secrets

LLM scanners

Descripción del empleo

Lightspeed is seeking an experienced Application Security professional to operationalize Secure by Design across product and infrastructure, embedding security into design, code and deployment pipelines. You will model threats, tune SAST/DAST/LLM scanners, and drive AI-enabled vulnerability triage with cross‑functional teams.

The role emphasizes hands‑on remediation guidance, security enablement programs, and collaboration with Platform and Infra Security to automate guardrails in CI/CD