Lightspeed Commerce, Inc.
Senior Engineer, Application Security
About this role
Description: Serve as a foundational anchor on the AppSec team, leading the strategic shift toward developer-embedded security. Design, build, and scale state-of-the-art AppSec practices while collaborating with Vulnerability Operations. Operationalize Secure by Design principles and embed security controls into engineering workflows. Architect threat models and enhance AI-generated threat modeling pipelines. Configure and orchestrate security scanner rulesets to streamline Vulnerability Operations. Provide technical guidance to developers for complex vulnerabilities and drive developer security enablement. Requirements: Deep experience in Application Security or Secure Software Engineering in cloud environments. Bachelor's degree in Computer Science, Cybersecurity, or equivalent experience. Understanding of web application vulnerabilities (OWASP Top 10) and secure coding practices. Proven track record with SAST, DAST, SCA, and LLM scanner pipelines in CI/CD. Experience with threat modeling methodologies and guiding developers through code remediations. Proficiency in modern software development languages (e.g., Python, Go, JavaScript). Excellent communication skills to lead the Security Champions program. Benefits: Join a growing team with opportunities for skill and career development. Amazing benefits including equity, flexible paid time off, and health insurance. Contributions to pension plans and wellness benefits. Paid leave for new parents and mental health support services. Opportunities for training, volunteering, and social events.