This job has expired and is no longer accepting applications.
Similar live jobs
Opportunity at
Lightspeed CommerceSenior Engineer, Application Security
Lightspeed Commerce is seeking a Senior Engineer for its Application Security team. Founded in Montreal in 2005, the company provides a cloud-based commerce platform that unifies…
Career Tools
About this role
Senior Engineer, Application Security at Lightspeed Commerce is a full-time role. Work arrangement: Not specified. Location: Canada. No salary is shown in this listing. It was posted on Nov 3, 2026. This listing is paused and not taking applications at the moment.
Job Description
Lightspeed Commerce is seeking a Senior Engineer for its Application Security team. Founded in Montreal in 2005, the company provides a cloud-based commerce platform that unifies online and physical retail, hospitality, and golf operations for merchants across more than 100 countries. In this position, the professional will serve as a foundational anchor on the application security team, driving the shift toward developer-embedded security and Secure by Design operations.
This role suits an experienced security engineer looking to design and scale application security practices using modern automation and AI-assisted workflows. The successful candidate will help eliminate developer friction, address legacy risks, and protect software lifecycles against advanced threats. Lightspeed operates as an equal opportunity employer committed to an inclusive workplace and conducts criminal record checks during the hiring process.
Responsibilities
- Operationalize Secure by Design principles by embedding security controls into feature designs, pull requests, and daily engineering workflows
- Build and validate feature and infrastructure threat models, including AI-generated threat modeling pipelines
- Configure and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to reduce false positives
- Develop new application security processes while maintaining existing security controls
- Use AI-driven automation to accelerate vulnerability triage, remediation, and backlog reduction
- Provide technical remediation guidance to developers handling complex structural flaws
- Lead the Security Champions program and deliver secure coding workshops across the organization
- Collaborate with platform and infrastructure security teams to integrate automated guardrails into CI/CD pipelines
Requirements
- Hands-on experience in Application Security, Product Security, or Secure Software Engineering within cloud environments
- Understanding of web application vulnerabilities from the OWASP Top 10, business logic flaws, and secure coding practices
- Experience tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines within CI/CD environments
- Familiarity with threat modeling methodologies and guiding developers through code fixes
- Experience utilizing AI and LLM tools to automate security analyses and optimize developer workflows
- Proficiency in modern programming languages such as Python, Go, JavaScript, TypeScript, or Java
Qualifications
- Bachelor degree in Computer Science, Cybersecurity, Software Engineering, or equivalent practical experience
- Demonstrated ability to lead cross-functional security advocacy programs
Core Skills
Benefits
- Equity scheme for all employees
- Flexible paid time off and remote work policies
- Health insurance coverage
- RRSP pension plan contributions
- Annual health and wellness benefit of 500 dollars
- Paid parental leave and assistance
- Online mental health platform, counseling, and coaching services
- Training opportunities and skills development
- Dedicated volunteer day
- On-site fully stocked kitchen with meals, hot beverages, and cold beverages
- Company happy hours
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
The posting specifies that this is a full-time position.
What location is this job based in?
The specific location is not stated in the source job posting.
What benefits and perks are offered?
Lightspeed provides equity for all employees, flexible paid time off and remote work policies, health insurance, RRSP pension contributions, a 500 dollar annual health and wellness benefit, parental leave, mental health services, training opportunities, a volunteer day, and office perks like a fully stocked kitchen and happy hours.
Are background checks required during the hiring process?
Yes, applicants are asked to disclose criminal convictions, and criminal record checks are conducted as part of the hiring process for this role.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
Explore more jobs like this
What to do next
This listing is no longer open, so the quickest next step is one of the live roles above. Save the ones that fit, and check the employer's other openings on its company page. To hear about new matches as they are posted, set up a job alert from your candidate account.