Senior Analyst, Application Security

Posted 10 Days Ago
Be an Early Applicant
Montréal, QC, CAN
In-Office
Senior level
Logistics • Transportation
The Role
Leads application security strategy across software development and delivery environments. Defines security controls, guardrails, standards, and secure design patterns; conducts threat modeling and application security testing; manages security tooling and automation; and supports remediation across web, mobile, API, container, desktop, cloud, CI/CD, and serverless applications. Partners with engineering, product, architecture, and cybersecurity teams, while providing training, documentation, coaching, and technical direction on complex security matters.
Summary Generated by Built In

Intelcom | Dragonfly

With more than 100 sorting stations and operations across three continents, Intelcom | Dragonfly is Canada’s leader in last-mile logistics. Our vision is clear: to deliver fast, accurate, and reliable service powered by cutting-edge technology. 


A Strategic Role at the Heart of Logistic

Key Responsibilities


  • Act as a subject matter expert on secure software development practices.
  • Define, implement, and continuously improve application security controls, standards, guardrails, and baseline configurations.
  • Assess the effectiveness of controls across CI/CD pipelines and application platforms, including web, mobile, APIs, containers, desktop applications, and Commercial Off-The-Shelf solutions.
  • Lead threat modeling and secure design activities and provide technical recommendations on remediation approaches and security patterns.
  • Own and continuously improve application security services and tooling, including selection, onboarding, configuration, optimization, testing, and lifecycle management.
  • Lead application security testing activities (manual, automated) and remediation activities
  • Drive security automation and repeatable controls implementation throughout the software development lifecycle.
  • Partner with engineering, product, platform, architecture, and cybersecurity teams to design and implement appropriate security features and patterns.
  • Create and maintain application security guidance, secure patterns, training materials, and technical documentation.
  • Host training sessions, knowledge-sharing forums, and drive application security community of practice
  • Provide training, coaching on API, web, mobile and application security principles and risks.
  • Make decisions on complex issues and provide direction aligned with application security best practices
  • Deliver outcomes with a high degree of autonomy and provide practical recommendations on complex application security matters..

Required Skills & Experience


  • Broad knowledge of application security, secure software development, application testing methodologies, secure coding, and secure product design.
  • Strong understanding of modern application architectures, APIs, web services, and associated security risks.
  • Strong knowledge of threat modeling and secure design methodologies.
  • Working knowledge of cloud security concepts and controls in Azure and/or AWS as they relate to application workloads.
  • Working knowledge of security automation with scripting languages such as Python and Bash.
  • Knowledge of one or more development languages such as Java, Node.js, C#, or .NET.
  • Knowledge of information security risk, security frameworks, regulatory requirements, and industry best practices.
  • Strong problem-solving, communication, stakeholder management, and time-management skills.
  • Hands-on experience with application security testing, implementation of secrets management solutions and CI/CD, container, API, serverless security controls

Qualifications


  • Degree in computer science or a related field, with 5 to 10+ years of relevant experience in IT, application security, or an equivalent combination of education and experience.
  • Relevant security certification(s), such as CISSP, CSSLP, CEH, OSCP, or GIAC, or demonstrated equivalent security knowledge and experience.
  • Cloud or vendor-specific security certification(s), or demonstrated equivalent knowledge and experience, are considered an asset.

Why Join Us? 

At Intelcom | Dragonfly, you’ll thrive in a flexible and stimulating environment, surrounded by passionate talent. You’ll also enjoy a wide range of benefits: 

  • On-site gym with a personal trainer 

  • Employer-provided lunch of your choice 

  • Comprehensive group insurance 

  • Group RRSP plan 

  • Care & Well‑Being Activities

  • Partial reimbursement for public transportation 

  • Employee Assistance Program 

 …and much more. 

 

This position has been opened to address a genuine organizational need within the company.

At Intelcom | Dragonfly, we move forward guided by strong values: collaboration, innovation, excellence, and responsibility. 

We embrace diversity, ensure equity, and foster a true sense of belonging.

Accommodation measures are available for individuals with disabilities throughout our recruitment process, in compliance with the law. Please let us know if you have any specific needs.

Skills Required

  • Degree in computer science or a related field, or equivalent education and experience
  • 5 to 10+ years of relevant experience in IT or application security, or equivalent experience
  • Broad knowledge of application security, secure software development, application testing, secure coding, and secure product design
  • Strong understanding of modern application architectures, APIs, web services, and associated security risks
  • Strong knowledge of threat modeling and secure design methodologies
  • Working knowledge of cloud security concepts and controls in Azure and/or AWS
  • Working knowledge of security automation using Python and Bash
  • Knowledge of Java, Node.js, C#, .NET, or another development language
  • Knowledge of information security risk, security frameworks, regulatory requirements, and industry best practices
  • Hands-on experience with application security testing, secrets management, CI/CD, container, API, and serverless security controls
  • Strong problem-solving, communication, stakeholder management, and time-management skills
  • Relevant security certification such as CISSP, CSSLP, CEH, OSCP, or GIAC, or equivalent security knowledge and experience
  • Cloud or vendor-specific security certification, or equivalent knowledge and experience
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Montréal
1,918 Employees

What We Do

Intelcom est une entreprise de logistique du dernier kilomètre chef de file dans le secteur du commerce électronique. Nos équipes d’un bout à l’autre du Canada ainsi que notre réseau d’entrepreneurs indépendants contribuent aux activités quotidiennes d’Intelcom. En innovant constamment et en adoptant une approche unique en matière de technologies logistiques, Intelcom est résolument tournée vers l’avenir afin de continuer à offrir une efficacité opérationnelle toujours plus grande. __ Intelcom is a leading last-mile carrier in the e-commerce sector. Our teams across Canada as well as our network of independent contractors contribute to Intelcom’s daily operations. Through constant innovation and a unique approach to logistics technology, Intelcom is focused on what’s ahead to continue delivering new levels of operational efficiency.

Similar Jobs

Enverus Logo Enverus

Application Customer Support Analyst - 26411

Big Data • Information Technology • Software • Analytics • Energy
In-Office or Remote
2 Locations
1800 Employees

Atlassian Logo Atlassian

Principal Software Engineer

Cloud • Information Technology • Productivity • Security • Software • App development • Automation
In-Office or Remote
4 Locations
11000 Employees

Block Logo Block

Senior Software Engineer

Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
In-Office or Remote
8 Locations
12000 Employees
185K-327K Annually

Block Logo Block

Software Engineer

Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
In-Office or Remote
8 Locations
12000 Employees
153K-270K Annually

Similar Companies Hiring

Toro TMS Thumbnail
Cloud • Enterprise Web • Sales • Software • Transportation
Chicago, IL
80 Employees
Axle Health Thumbnail
Artificial Intelligence • Healthtech • Information Technology • Logistics
Santa Monica, CA
25 Employees
Vega Thumbnail
Artificial Intelligence • Automotive • Insurance • Transportation
US
65 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account