Senior AppSec Engineer - AI-Driven Secure by Design

Lightspeed Commerce; United States; Teletrabalho; USD 140 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Lightspeed equity scheme

Flexible paid time off

Health insurance

RRSP/pension contributions

Mental health resources

Resumo da oferta

Lightspeed Commerce is seeking a Senior Application Security Engineer in a remote-capable role for the US. You will embed security into product design, champion Secure by Design, and lead AI-enhanced security automation across CI/CD pipelines.

You will work with Vulnerability Operations to streamline triage and remediation. You’ll drive threat modeling, secure coding workshops, and cross-functional security initiatives across Lightspeed’s cloud environments, enabling developers while

Qualificações

• Hands-on experience in Application Security or Secure Software Engineering in cloud environments.
• Bachelor's degree in CS/Cybersecurity/Software Eng or equivalent.
• Deep understanding of OWASP Top 10 and secure coding practices.
• Experience tuning SAST/DAST/SCA/Secrets/LLM pipelines in CI/CD.
• Experience with threat modeling and Secure by Design principles.
• Proven ability to guide developers through code remediations.
• Experience using AI/LLM tools to automate security analyses.

Responsabilidades

• Embed security controls into feature designs, PRs, IaC checks, and engineering workflows.
• Architect threat models for features and infra and improve AI-driven threat modeling pipelines.
• Tune and orchestrate SAST/DAST/SCA/Secrets/LLM scanners to reduce false positives.
• Build and stabilize AppSec processes while maintaining legacy controls.
• Lead AI-driven automation to accelerate vulnerability triage and remediation.
• Provide hands-on fix guidance for web vulnerabilities and complex flaws.
• Champion Security Champions program and deliver secure coding workshops.
• Collaborate with Platform and Infra Security to add CI/CD guardrails.

Conhecimentos

Application Security

Threat modeling

CI/CD automation

Secure by design

Developer collaboration

Python/Go/JS

Strong communication

Formação académica

Bachelor's degree in Computer Science/Cybersecurity/Software Engineering

Ferramentas

SAST

DAST

SCA

Secrets scanning

LLM scanners

IaC checks

CI/CD security tooling

Descrição da oferta de emprego

Lightspeed Commerce is seeking a Senior Application Security Engineer in a remote-capable role for the US. You will embed security into product design, champion Secure by Design, and lead AI-enhanced security automation across CI/CD pipelines.

You will work with Vulnerability Operations to streamline triage and remediation. You’ll drive threat modeling, secure coding workshops, and cross-functional security initiatives across Lightspeed’s cloud environments, enabling developers while