Senior Application Security Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Application Security Analyst based in Canada. Join a security-focused team dedicated to strengthening application security across cloud-based platforms, endpoints, and infrastructure. As a Senior Application Security Analyst, you will help refine and deliver an application security program that protects systems, reduces vulnerabilities, and supports secure engineering practices. You will collaborate with engineering and operational teams to identify emerging risks, assess security controls, and coordinate remediation efforts. The role combines hands-on technical expertise with stakeholder engagement, risk tracking, and audit support. You will work across complex enterprise, web-scale, and serverless environments while helping translate technical findings into practical security improvements. This is an opportunity to make a meaningful contribution to a secure digital learning ecosystem while continuing to develop your expertise in application and infrastructure security. Accountabilities: You will contribute to the ongoing development and delivery of the application security program, working closely with technical and operational stakeholders to identify, evaluate, and address security risks. - Help refine and implement application security practices, with a focus on endpoints, applications, and underlying infrastructure. - Collaborate with operational teams to assess existing and emerging security risks and provide subject matter expertise. - Conduct regular security scans and coordinate with relevant stakeholders to resolve identified issues. - Triage third-party security assessments and follow up with stakeholders to ensure findings are addressed. - Monitor and track security risks, findings, and associated documentation throughout their lifecycle. - Support internal teams during security assessments, reviews, and audits.

- Review independent third-party reports from vendors, suppliers, and partners to verify alignment with the application security program. - Engage stakeholders in remediation activities and help ensure security findings are resolved effectively. - Generate and organize security-related evidence to support audit exercises and demonstrate the implementation of security controls. Requirements: You bring practical application security experience, strong technical knowledge, and the ability to work independently while communicating effectively with stakeholders across engineering and operations. - Practical programming experience and proficiency in reviewing code across multiple programming languages. - Hands-on experience implementing information security controls across endpoint, application, and infrastructure security domains. - Familiarity with application security testing methodologies and tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). - Hands-on experience with public cloud services such as AWS or Azure. - Experience conducting vulnerability assessments and penetration tests. - Experience working with security controls based on frameworks and standards such as ISO 27001, NIST 800-53, PCI-DSS, or PBMM. - Familiarity with enterprise-grade Governance, Risk, and Compliance (GRC) tools. - Experience assessing security control implementations in large enterprise, web-scale, and serverless environments. - Proven ability to engage stakeholders and coordinate the remediation of security-related findings. - Experience supporting audits by preparing and providing security-related evidence. - Strong communication skills, including the ability to explain complex technical concepts clearly to stakeholders with different levels of technical expertise.