{"id":2182109,"url":"https://alion.io/job/lightspeed-commerce-senior-engineer-application-security","title":"Senior Engineer, Application Security","company":{"id":5549,"name":"Lightspeed Commerce","domain":"lightspeedhq.com","url":"https://alion.io/company/lightspeedhq","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":82,"open_postings":15,"ghost_share":0,"stale_share":0.733,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Calgary, Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":140000,"period":"year","method":"role_seniority_country_cell","sample_n":43},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Edge AI","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-10-09T14:00:08Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T00:34:13Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Hi there! Thanks for stopping by\nAre you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place!\nAs a Senior Application Security Engineer, you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. You will design, build, and scale state-of-the-art AppSec practices while collaborating closely with Vulnerability Operations to streamline vulnerability triage and remediation. Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors.\nWhat you’ll be doing:\nOperationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows.\n\nArchitect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines.\n\nConfigure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to eliminate false positives and streamline Vulnerability Operations.\n\nBuild and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active.\n\nPioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, systematically burning down security backlogs.\n\nProvide hands-on technical fix guidance to developers for complex structural flaws and web application vulnerabilities.\n\nDrive developer security enablement across the organization-championing our Security Champions program and delivering engaging, impactful secure coding workshops.\n\nPartner closely with Platform and Infrastructure Security teams to build frictionless, automated guardrails into CI/CD pipelines.\n\nWhat you need to bring:\nDeep, hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments.\n\nBachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.\n\nDeep understanding of web application vulnerabilities (OWASP Top 10), business logic flaws, and secure coding practices.\n\nProven track record tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines in CI/CD environments.\n\nDemonstrated experience with threat modeling methodologies, Secure by Design principles, and guiding developers through code remediations.\n\nProven experience leveraging AI/LLM tools to automate security analyses, accelerate triage, and optimize developer security workflows.\n\nFluency in modern software development languages (e.g., Python, Go, JavaScript/TypeScript, Java).\n\nExcellent cross-functional influence and communication skills to effectively lead the Security Champions program.\n\nWhat’s in it for you:\nJoin a growing team and help us move to the next level\n\nAmazing benefits & perks, including equity for all Lightspeeders\n\nConstant development of both your skill-set and business acumen with limitless growth opportunities\n\nLots of autonomy, flexible work culture\n\nInnovation time to explore and learn at work\n\nShaping the company by joining cultural & technical committees\n\nTons of growth opportunities into technical or people management roles\n\nOpportunity to join a fast-paced, high-growth company\n\nOpportunity to learn, expand your skill set, forge wonderful relationships and make your mark within the diverse and inclusive Lightspeed family, a true Canadian tech success story\n\n…. And enjoy a range of benefits that will keep you happy, healthy and (not) hungry.\nLightspeed equity scheme (we are all owners).\n\nFlexible paid time off and remote work policies.\n\nHealth insurance.\n\nContributions to your pension plan - RRSP.\n\nHealth and wellness benefit of $500 per year.\n\nPaid leave and assistance for new parents.\n\nMental health online platform and counseling & coaching services.\n\nTraining opportunities to grow your skills and career\n\nVolunteer day.\n\nFully stacked kitchen (hot and cold beverages, meals served)\n\nHappy hours to build your relationships with colleagues after work\n\nFuel your growth. Find your people.\nAt Lightspeed, your growth is our priority. We invest in you with continuous learning opportunities, global mobility and benefits designed to support you-all within a driven, diverse and inclusive team that’s passionate about empowering our communities\nPlease note that we ask applicants to disclose any criminal convictions, and we conduct criminal record checks as part of our hiring process for this role.\nTo all recruitment agencies: Lightspeed does not accept unsolicited agency resumes. If we have not directly engaged your company in writing to supply candidates for a specific vacancy, Lightspeed will not be responsible for any fees related to unsolicited resumes.\nLightspeed is a proud equal opportunity employer and we are committed to creating an inclusive and barrier-free workplace. Lightspeed welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.\nWhere to from here?\nObviously, this has to be mutually beneficial: we want you to step into a role you love, and we want to offer you a place you’re proud to come to every day. For a glimpse into our world check out our career page here.\nLightspeed is building communities through commerce, and we need people from all backgrounds and lived experiences to do that. We were founded in 2005, in Montreal’s gay village and our original members were all part of the LGBTQ+ community. The ethos of our business has been about inclusion from the very beginning, and we strive to provide a workplace where everyone belongs.\nWho we are:\nPowering the businesses that are the backbone of the global economy, Lightspeed's one-stop commerce platform helps merchants innovate to simplify, scale, and provide exceptional customer experiences. Our cloud commerce solution transforms and unifies online and physical operations, multichannel sales, expansion to new locations, global payments, financial solutions, and connection to supplier networks.\nFounded in Montréal, Canada in 2005, Lightspeed is dual-listed on the New York Stock Exchange (NYSE: LSPD) and Toronto Stock Exchange (TSX: LSPD). With teams across North America, Europe, and Asia Pacific, the company serves retail, hospitality, and golf businesses in over 100 countries.\nLightspeed handles your information in accordance with our Applicant Privacy Statement.","description_format":"text","description_chars":6683,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity","Flexible schedule","Growth opportunities","Health insurance"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"},{"name":"Calgary","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Commerce","POS Systems","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-09T15:13:51Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Approved LMIA in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/lightspeed-commerce-senior-engineer-application-security","json_url":"https://alion.io/job/lightspeed-commerce-senior-engineer-application-security.json","meta":{"generated_at":"2026-10-12T01:45:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2356,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5549},"rest":"https://alion.io/mcp/rest/get_company?id=5549"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flightspeed-commerce-senior-engineer-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flightspeed-commerce-senior-engineer-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flightspeed-commerce-senior-engineer-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lightspeed-commerce-senior-engineer-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flightspeed-commerce-senior-engineer-application-security"}]}