{"id":1047624,"url":"https://alion.io/job/global-relay-principal-application-security-specialist-2","title":"Principal Application Security Specialist","company":{"id":58182,"name":"Global Relay","domain":"globalrelay.com","url":"https://alion.io/company/global-relay","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":82,"open_postings":32,"ghost_share":0.031,"stale_share":0.406,"repost_share":0.094,"time_to_fill_p50_days":64,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vancouver, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":166000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":19},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Git","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false}],"status":"live","first_seen_at":"2026-07-13T17:01:09Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-11-13T15:18:27Z","board_verified":true,"closed_at":null,"days_open":123,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":122},"description":"Who we are:\nFor over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.\nThough we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It’s a place where you can genuinely make an impact - and be recognized for it.\nWe believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers.\nYour role:\n\nThe Principal Application Security Specialist is the most senior individual contributor across Global Relay's Software & Application Security function. Combining deep application security testing mastery with DevSecOps leadership, you set the technical direction for how Global Relay tests the security of its applications and for how security is engineered into the software development lifecycle. You lead the most complex and novel assessments, define testing methodology and standards, and drive the integration of automated security controls into CI/CD pipelines. You act as the organization’s authority on application, mobile and AI/LLM security, and partner with engineering, platform and product leadership so that security is built in and aligned with business objectives.\nYour responsibilities:\nTesting & methodology leadership\nCollaborate with the Team Lead, Application & Software Security to develop and own the application security testing methodology and standards across web, API, mobile and AI/LLM domains.\nLead the most complex, novel and high-risk security assessments, including original research and the development of new testing techniques and tooling.\nOwn the organization-wide triage, escalation and evidence-quality framework across all security testing and scanning functions and define how L1-L3 teams are trained and measured against it.\nSupport the direction for the penetration testing and offensive security program.\nOwn the most advanced threat modelling for critical and cross-cutting architecture.\nServe as the organization's authority and final technical escalation point for application security.\nDevSecOps & secure SDLC\nDrive the integration of security into the SDLC and CI/CD pipelines, championing a proactive, risk-based, “shift-left” approach.\nDevelop the organization-wide standards for remediation verification, retest evidence and release closure, ensuring security gating is consistently and appropriately applied across all release pipelines.\nDesign and deploy an automated security framework for robust tooling and processes, using scripting and open-source solutions.\nCollaborate with Engineering for the selection, deployment and management of security scanning tools (SAST, DAST, SCA, container) within CI/CD pipelines, integrating them via APIs and plugins using agile delivery methods.\nServe as the liaison for DevSecOps standards and provide input into new standards and policies.\nReview and analyze vulnerability data to identify risk across applications, infrastructure and network, and manage false positives.\nSet the organization's standards for root-cause analysis and remediation guidance on the most complex or systemic security defects and define how remediation quality is assessed across teams.\nInfluence, measurement & people\nDefine how testing coverage, quality and effectiveness are measured and drive continuous improvement.\nPartner with engineering, product and architecture teams to influence secure design at scale and prioritize security investment.\nLead security sessions for engineering teams covering risks, report analysis, mitigations and process improvements.\nMentor and develop specialists, create documentation and training material, and raise the technical bar across the function.\nRepresent application security in cross-functional and, where appropriate, external forums.\nAbout you:\n8+ years experience across application/product security testing and DevSecOps, with expert knowledge of software security.\nExperience with security frameworks (OWASP, MITRE, NIST), testing tools (SAST/DAST/SCA), scripting (Python, Java, Bash, PowerShell), and DevOps/CI-CD tooling (Git, Jenkins, Docker/Kubernetes)\nSolid understanding of secure development and coding practices\nComfortable working cross-functionally with Security, Dev, and Engineering teams\nStrong communicator, able to translate technical concepts for any audience\nSelf-directed, detail-oriented, and a sharp problem-solver\nCompensation:\n\nGlobal Relay advertises the pay range for this role in compliance with British Columbia’s pay transparency laws. Individual pay rates are determined by evaluating factors such as expertise, skills, education, and professional background. \nThe range below reflects the expected annual base salary, which is only one element of our comprehensive total rewards package designed to reflect our company pay philosophy, culture and values. We aim to foster an inspiring work environment and support employees' work-life rhythms. We provide a comprehensive extended health benefits program, including virtual healthcare and a wellness allowance. Employees also receive annual allotted vacation days, which increase based on tenure. Other benefits include: Paid sick days, maternity/parental enhancement program, bonus, and an RRSP contribution matching program. \nFor Vancouver-based employees, we provide a subsidized meal program, courtesy of our talented in-house culinary team!\nBritish Columbia - Base salary range\n$125,000—$160,000 CAD\nWhat you can expect:\nAt Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills.\nGlobal Relay is an equal-opportunity employer committed to diversity, equity, and inclusion.\nWe seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual.\nTo learn more about our business, culture, and community involvement, visit www.globalrelay.com.","description_format":"text","description_chars":6866,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Document Management","Security Compliance","RegTech, AML & Compliance"],"lifecycle":[{"event":"open","at":"2026-09-18T22:22:05Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.712,"p_room":0.36,"age_days":121,"expected_fill_days":64,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/global-relay-principal-application-security-specialist-2","json_url":"https://alion.io/job/global-relay-principal-application-security-specialist-2.json","meta":{"generated_at":"2026-11-13T19:33:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38997,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58182},"rest":"https://alion.io/mcp/rest/get_company?id=58182"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fglobal-relay-principal-application-security-specialist-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fglobal-relay-principal-application-security-specialist-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fglobal-relay-principal-application-security-specialist-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/global-relay-principal-application-security-specialist-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fglobal-relay-principal-application-security-specialist-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1047624}},{"tool":"search_jobs","arguments":{"company":"globalrelay.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1047624},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}