Senior Application Security Analyst

This is a fully remote position, open to applicants in Canada.

📋 Description

• Assist in enhancing and executing D2L's Application Security Program, with a focus on endpoints, applications, and the foundational infrastructure.

• Work collaboratively with operational teams to identify current and potential security risks while providing subject matter expertise.

• Conduct routine security scans and liaise with stakeholders to resolve outstanding issues.

• Evaluate third-party assessments and engage with stakeholders to address identified issues.

• Monitor and document security risks and related artifacts throughout their lifecycle.

• Provide support to internal D2L teams during security assessments, reviews, and audits.

• Analyze independent third-party reports from vendors, suppliers, and partners to ensure alignment with D2L’s Application Security Program.

⛳️ Requirements

• Capability to engage with process owners and articulate the security controls associated with various processes.

• Proficiency in simplifying complex technical concepts for diverse stakeholders at different levels.

• Ability to work autonomously.

• Quick learning aptitude and the ability to synthesize information from various domains and sources.

• Strong collaboration skills with a diverse range of engineering and operational teams.

• Practical programming knowledge and expertise in reviewing code across multiple programming languages.

• Hands-on experience implementing information security controls across Endpoint Security, Application Security, and Infrastructure Security, including SAST, DAST, and SCA.

• Practical experience with public cloud platforms such as AWS or Azure.

• Experience conducting vulnerability assessments and penetration testing.

• Familiarity with teams implementing controls in accordance with ISO 27001, NIST 800-53, PCI-DSS, and PBMM.

• Experience utilizing enterprise-grade governance, risk, and compliance (GRC) tools.

• Experience evaluating security control implementations in large enterprise, web-scale, and serverless environments.

• Proven experience in engaging stakeholders to remediate security-related findings.

• Experience supporting audits by providing security-related evidence.

• Red Team and Blue Team experience is a significant advantage.

🏝️ Benefits

• Additional benefits may include a Wellness Subsidy.

• Equity Grants.

• Variable Incentive.

• Flexible work arrangements.

• Opportunities for Learning and Growth.

• Tuition reimbursement of up to $4,000 CAD for continuing education through the SkillsWave Program.

• 2 Paid Days off for SkillsWave-related activities such as exams or final assignments.

• Access to mental health services, EFAP program, financial planning, and more.

• Retirement planning.

• 2 Paid Volunteer Days.

• Competitive Benefits Package.

• Home Internet Reimbursements.

• Employee Referral Program.

• Wellness Reimbursement.

• Employee Recognition.

• Social Events.

• Dog-Friendly Office Spaces at HQ in Kitchener, Winnipeg, Vancouver, and Melbourne offices.