[Hiring] Senior Application Security Analyst @D2L

Role Description

As Senior Application Security Analyst at D2L, you are a key influencer and contributor to the refinement and delivery of D2L's Application Security Program.

How will I make an Impact?

• Assist in refining and delivering D2L's Application Security Program with particular focus on endpoints, applications, and the underlying infrastructure.
• Collaborate with operational teams on existing and emerging security risks and provide subject matter expertise.
• Perform regular security scans and coordinate with stakeholders to address open issues.
• Triage third-party assessments and follow up with stakeholders to address issues.
• Monitor/track security risks and related artifacts throughout their lifecycle.
• Support internal D2L teams during security assessments/reviews/audits.
• Review independent third-party reports from vendors, suppliers and partners for alignment with D2L’s Application Security Program.

Qualifications

• Ability to engage process owners and explain security controls associated with processes.
• Ability to break down complex technical concepts to simple terms for various levels of stakeholders.
• Ability to work independently.
• Ability to learn fast and synthesize information from different domains and sources.
• Ability to work well with a wide cross-section of engineering and operational teams.

Requirements

• You have practical programming experience and are proficient at reviewing code in a variety of languages.
• You have previous hands-on experience implementing information security controls across a wide range of domains including Endpoint Security, Application Security, and Infrastructure Security. (SAST, DAST, SCA).
• You have hands-on experience with public cloud services like AWS or Azure etc.
• You have hands-on experience performing vulnerability assessments and penetration tests.
• Having both Red Team and Blue Team experience is a strong plus.
• You have demonstrable experience working with teams that have implemented security controls based on ISO 27001/NIST 800-53, PCI-DSS, PBMM.
• You have experience using enterprise-grade governance risk and compliance (GRC) tools.
• You have experience assessing security control implementations on large enterprises, web scale and serverless environments.
• You have experience engaging stakeholders in remediating security-related findings.
• You have experience supporting an audit exercise by generating security-related evidence.

Benefits

• Base Salary Range: $140,000 — $175,000 CAD.
• Wellness Subsidy.
• Equity Grants.
• Variable Incentive.
• Impactful work transforming the way the world learns.
• Flexible work arrangements.
• Learning and Growth opportunities.
• Tuition reimbursement of up to $4,000 CAD for continuing education through our SkillsWave Program.
• 2 Paid Days off for SkillsWave-related activities like exams or final assignments.
• Employee wellbeing (Access to mental health services, EFAP program, financial planning and more).
• Retirement planning.
• 2 Paid Volunteer Days.
• Competitive Benefits Package.
• Home Internet Reimbursements.
• Employee Referral Program.
• Wellness Reimbursement.
• Employee Recognition.
• Social Events.
• Dog Friendly Offices Spaces at our HQ in Kitchener, Winnipeg, Vancouver and Melbourne offices.