Job opportunity
Senior Application Security Engineer
Lightspeed Commerce
Secure software at Lightspeed as a Senior Application Security Engineer, specializing in threat modeling and developer-embedded security practices.
This senior position leads Lightspeed’s strategic shift toward Secure by Design and hard-left AppSec practices. You will build scalable controls across feature designs, pull requests, infrastructure-as-code checks, and engineering workflows. The work combines vulnerability operations, AI-assisted automation, and developer enablement.
Key Responsibilities:
Operationalize Secure by Design principles across engineering workflows
Architect feature and infrastructure threat models
Tune SAST, DAST, SCA, Secrets, and LLM scanners
Automate vulnerability triage and remediation with AI
Guide developers through complex security fixes
Requirements:
Hands-on Application Security experience in cloud environments
Understanding of OWASP Top 10 and business logic flaws
Experience tuning security pipelines within CI/CD environments
Knowledge of threat modeling and Secure by Design
Fluency in Python, Go, JavaScript, TypeScript, or Java
Apply your AppSec, AI automation, and secure coding expertise to strengthen Lightspeed’s software development lifecycle.
#J-18808-Ljbffr
Apply on source site This senior position leads Lightspeed’s strategic shift toward Secure by Design and hard-left AppSec practices. You will build scalable controls across feature designs, pull requests, infrastructure-as-code checks, and engineering workflows. The work combines vulnerability operations, AI-assisted automation, and developer enablement.
Key Responsibilities:
Operationalize Secure by Design principles across engineering workflows
Architect feature and infrastructure threat models
Tune SAST, DAST, SCA, Secrets, and LLM scanners
Automate vulnerability triage and remediation with AI
Guide developers through complex security fixes
Requirements:
Hands-on Application Security experience in cloud environments
Understanding of OWASP Top 10 and business logic flaws
Experience tuning security pipelines within CI/CD environments
Knowledge of threat modeling and Secure by Design
Fluency in Python, Go, JavaScript, TypeScript, or Java
Apply your AppSec, AI automation, and secure coding expertise to strengthen Lightspeed’s software development lifecycle.
#J-18808-Ljbffr