workday
Senior Analyst, Application Security
Intelcom | Dragonfly
Quebec, CAN
Full-time
Senior · 10+ years experience
Onsite
Discovered 1 weeks ago
Full Job Posting
Key Responsibilities
- Act as a subject matter expert on secure software development practices.
- Define, implement, and continuously improve application security controls, standards, guardrails, and baseline configurations.
- Assess the effectiveness of controls across CI/CD pipelines and application platforms, including web, mobile, APIs, containers, desktop applications, and Commercial Off-The-Shelf solutions.
- Lead threat modeling and secure design activities and provide technical recommendations on remediation approaches and security patterns.
- Own and continuously improve application security services and tooling, including selection, onboarding, configuration, optimization, testing, and lifecycle management.
- Lead application security testing activities (manual, automated) and remediation activities
- Drive security automation and repeatable controls implementation throughout the software development lifecycle.
- Partner with engineering, product, platform, architecture, and cybersecurity teams to design and implement appropriate security features and patterns.
- Create and maintain application security guidance, secure patterns, training materials, and technical documentation.
- Host training sessions, knowledge-sharing forums, and drive application security community of practice
- Provide training, coaching on API, web, mobile and application security principles and risks.
- Make decisions on complex issues and provide direction aligned with application security best practices
- Deliver outcomes with a high degree of autonomy and provide practical recommendations on complex application security matters..
- Required Skills & Experience
- Broad knowledge of application security, secure software development, application testing methodologies, secure coding, and secure product design.
- Strong understanding of modern application architectures, APIs, web services, and associated security risks.
- Strong knowledge of threat modeling and secure design methodologies.
- Working knowledge of cloud security concepts and controls in Azure and/or AWS as they relate to application workloads.
- Working knowledge of security automation with scripting languages such as Python and Bash.
- Knowledge of one or more development languages such as Java, Node.js, C#, or.NET.
- Knowledge of information security risk, security frameworks, regulatory requirements, and industry best practices.
- Strong problem-solving, communication, stakeholder management, and time-management skills.
- Hands-on experience with application security testing, implementation of secrets management solutions and CI/CD, container, API, serverless security controls
Qualifications
- Degree in computer science or a related field, with 5 to 10+ years of relevant experience in IT, application security, or an equivalent combination of education and experience.
- Relevant security certification(s), such as CISSP, CSSLP, CEH, OSCP, or GIAC, or demonstrated equivalent security knowledge and experience.
- Cloud or vendor-specific security certification(s), or demonstrated equivalent knowledge and experience, are considered an asset.
- Why Join Us?
- At Intelcom | Dragonfly, you’ll thrive in a flexible and stimulating environment, surrounded by passionate talent. You’ll also enjoy a wide range of benefits:
- On-site gym with a personal trainer
- Employer-provided lunch of your choice
- Comprehensive group insurance
- Group RRSP plan
- Care & Well‐Being Activities
- Partial reimbursement for public transportation
- Employee Assistance Program
- ...and much more.
- This position has been opened to address a genuine organizational need within the company.
- At Intelcom | Dragonfly, we move forward guided by strong values: collaboration, innovation, excellence, and responsibility.
- We embrace diversity, ensure equity, and foster a true sense of belonging.
- Accommodation measures are available for individuals with disabilities throughout our recruitment process, in compliance with the law. Please let us know if you have any specific needs.
About Intelcom | Dragonfly
Logistics & Supply Chain Services4300 employeesFounded 1986
Private Canadian last-mile parcel-delivery company serving retailers, 3PLs, and consumers.
Visit company websiteApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Intelcom | Dragonfly
Package Handler – Warehouse Clerk
, CAN
Discovered TodayFull-time
Package Handler - Warehouse Clerk
, CAN
Discovered TodayPart-time
Maintenance Technician Team Lead
, CAN
Discovered TodayFull-time
Sort Supervisor
, CAN
Discovered YesterdayFull-time
Operations Supervisor
, CAN
Discovered 3 days agoFull-time
Package Handler – Warehouse Clerk
, CAN
Discovered 3 days agoPart-time
Package Handler – Warehouse Clerk
, CAN
Discovered 3 days agoPart-time
Lead Hand
, CAN
Discovered 3 days agoFull-time