Senior Application Security Analyst - D2L, Kitchener

About the role

As a Senior Application Security Analyst at D2L, you will serve as a key influencer in the refinement and delivery of our Application Security Program. You will work within a cloud-focused company that is modernizing education and building the future of work. This role involves working closely with various engineering and operational teams to ensure our platforms remain robust, innovative, and secure.

Key duties

• Assist in refining and delivering D2L's Application Security Program with particular focus on endpoints, applications, and the underlying infrastructure.
• Collaborate with operational teams on existing and emerging security risks and provide subject matter expertise.
• Perform regular security scans and coordinate with stakeholders to address open issues.
• Triage third-party assessments and follow up with stakeholders to address issues.
• Monitor and track security risks and related artifacts throughout their lifecycle.
• Support internal D2L teams during security assessments, reviews, and audits.
• Review independent third-party reports from vendors, suppliers, and partners for alignment with D2L’s Application Security Program.

Requirements

We are looking for candidates who possess the ability to engage process owners, explain complex security controls, and synthesize information from different domains. You should have the ability to work independently while collaborating effectively across a wide cross-section of teams.

• Practical programming experience and proficiency at reviewing code in a variety of languages.
• Hands-on experience implementing information security controls across Endpoint Security, Application Security, and Infrastructure Security (SAST, DAST, SCA).
• Hands-on experience with public cloud services like AWS or Azure.
• Hands-on experience performing vulnerability assessments and penetration tests.
• Experience working with teams that have implemented security controls based on ISO 27001/NIST 800-53, PCI-DSS, or PBMM.
• Experience using enterprise-grade governance risk and compliance (GRC) tools.
• Experience assessing security control implementations on large enterprises, web scale, and serverless environments.
• Experience engaging stakeholders in remediating security-related findings and supporting audit exercises.

Compensation and perks

D2L provides a competitive total compensation package designed to support your professional growth and personal well-being. Perks include flexible work arrangements, retirement planning, and access to mental health services.

• Base salary range of $110,000 to $150,000 CAD.
• Eligibility for additional benefits including a Wellness Subsidy, Equity Grants, and Variable Incentive.
• Tuition reimbursement of up to $4,000 CAD through our SkillsWave Program, plus 2 paid days off for related activities.
• 2 Paid Volunteer Days.
• Home Internet Reimbursements.
• Dog-friendly office spaces at our Kitchener headquarters.
• Comprehensive competitive benefits package and employee recognition programs.