Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 1 month ago
TC
Security Researcher Engineer
Tata Consultancy Services
Toronto, ON
- $100,000 to $120,000 CAD / year
- Full-time
Must Have Technical/Functional Skills
Added 1 month ago
C
Automation Test Lead (Playwright with Java)
Cognizant
Toronto, ON
- $90,000 to $110,000 CAD / year
- Full-time
Must have 3+ years of strong experience with Playwright for UI automation, API testing, and backend validation
Added 1 month ago
Associate or Vice President Full Stack Engineer
BMO
Toronto, ON · FCP
Programming language proficiency in Python, JavaScript/TypeScript, with familiarity in C#, Scala, or Java
Added 1 month ago
T
Senior Manager, Tokenized Deposits On-Chain Orchestration / Integration Layer Delivery
TD
Toronto, ON
- Full-time
5+ years of experience developing resilient workflow-based software solutions with Java and Spring, ideally using Microsoft SAGA or similar architectural pattern approach
Added 1 month ago
C
QA Lead – Automation & Agile
CGI
Toronto, ON
- Full-time
Lead functional, integration, regression, API, and end-to-end testing.
Added 1 month ago
M
Cloud & AI Apps Solution Engineer
Microsoft
Calgary, AB
- Full-time
…containerization, microservices, event-driven architectures, Python, Java, and…
Added 1 month ago
A
Senior Integration Engineer
Agiloft
Canada
- Full-time
Build, test, deploy, and maintain Workato recipes, custom connectors, API-based components, data mappings, and reusable integration templates.
Added 1 month ago
ZG
Full Stack Developer
ZAPCOM GROUP INC
Toronto, ON
- Full-time
Looking for Sr full stack developers 8+ years’ experience who needs to have core Java/Springboot skills on backend and Javascript and React skills on frontend.
Added 1 month ago
Principal Application Security Specialist
Global Relay
Vancouver, BC
Collaborate with the Team Lead, Application & Software Security to develop and own the application security testing methodology and standards across web, API, mobile and AI/LLM domains.
Added 1 month ago
H
Principal Data Architect
Hays
Toronto, ON
- Contract
…candidate will possess deep expertise in Azure Databricks, ADLS, Java/Scala-based API development, and event-driven architectures. This role requires strong technical leadership,…
Added 1 month ago
GR
Principal Application Security Specialist
Global Relay
Vancouver, BC
- Full-time
Collaborate with the Team Lead, Application & Software Security to develop and own the application security testing methodology and standards across web, API, mobile and AI/LLM domains.
Added 1 month ago
Growth Platform, Marketing Engineer
Faire
Toronto, ON
Hybrid Faire employees currently go into the office 3 days per week on Tuesd
Added 1 month ago
K
Workday Integration Lead
KPMG
Montreal, QC
- Full-time
Knowledge and experience about Web Services, REST API, XML, XSLT, SOAP, WSDL, JSON, Java, .Net or other integration technologies
Added 1 month ago
U
QA Automation Engineer
UST
Toronto, ON
- Full-time
…that ensure the quality and reliability of web, mobile, and API applications. The ideal candidate should have strong automation testing experience, excellent problem-solving skills, and a…
Added 1 month ago
PG
Java Developer with Python
Pacer Group
Mississauga, ON
- $125,000 to $135,000 CAD / year
- Full-time
Must have 7-8 years of experience · Must have strong experience in Java development and Python programming too
Added 1 month ago
H
Java Architect
Hays
Toronto, ON
- Contract
We are seeking an experienced Java Architect with strong expertise in designing and delivering scalable, cloud-native applications on Microsoft Azure. The ideal candidate will have hands-on…
Added 1 month ago
M
Manager or Senior Manager, Scientific Research & Experimental Development - Technical (IT)
MNP
Montreal, QC · Quebec, QC
- Full-time
…languages and modern technology environments - including Python, Java, JavaScript, TypeScript, .NET, C#, SQL, PHP, APIs, databases, cloud platforms, DevOps tools, artificial intelligence /…
Added 1 month ago
E
Senior Software Engineer
Elective
Vancouver, BC
- Full-time
Strong TypeScript fundamentals. These matter more to us than having used our exact stack. If you've done this work in Go, Python, Java, or C# and want to write TypeScript, say so.
Added 1 month ago
C
Senior Java Developer
Citi
Mississauga, ON · ON
- Full-time
Extensive experience system analysis and in programming of software applications using Core Java, Multithreading, Spring framework, and REST API.
Added 1 month ago
Software Engineer - Monitoring
Motive
Vancouver, BC
Experience in modern programming languages. Proficiency in Ruby, Golang, Kotlin/Java is a plus.
Added 1 month ago
T
SAP BTP AI Solutions Architect
Talan
Toronto, ON
- $160,000 to $200,000 CAD / year
- Full-time
CAP and integration expertise: At least four (4) years with CAP in Node.js or Java and three (3) years with SAP Integration Suite, including API Management and Event Mesh.
Added 1 month ago
T
SAP BTP AI Solutions Architect
Talan
Toronto, ON
- $160,000 to $200,000 CAD / year
- Full-time
CAP and integration expertise: At least four (4) years with CAP in Node.js or Java and three (3) years with SAP Integration Suite, including API Management and Event Mesh.
Added 1 month ago
V
Staff Software Engineer
VGS
Canada
- Full-time
…with a highly consistent modern stack (e.g. AWS, Kubernetes, Java, TypeScript, Python) and world-class AI-augmented SDLC tooling. We strip away the friction so you can focus on the problems…
Added 1 month ago
U
Data Architect
Univeris
Toronto, ON
- Full-time
Added 1 month ago
U
Data Architect
Univeris
Toronto, ON
- $130,000 to $150,000 CAD / year
- Full-time

Global Relay

Principal Application Security Specialist

Vancouver, BC, Canada

British Columbia - Base salary range: $125,000 CAD - $160,000 CAD · Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Pay: British Columbia - Base salary range: $125,000 CAD - $160,000 CAD
Job type: Full-time
Experience: 8+ years experience across application/product security testing and DevSecOps, with expert knowledge of software security.
Posting language: English
Posted: Sep 18, 2026

Original job description

Who we are:

For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.

Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It’s a place where you can genuinely make an impact – and be recognized for it.

We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers.

Your role:

The Principal Application Security Specialist is the most senior individual contributor across Global Relay's Software & Application Security function. Combining deep application security testing mastery with DevSecOps leadership, you set the technical direction for how Global Relay tests the security of its applications and for how security is engineered into the software development lifecycle. You lead the most complex and novel assessments, define testing methodology and standards, and drive the integration of automated security controls into CI/CD pipelines. You act as the organization’s authority on application, mobile and AI/LLM security, and partner with engineering, platform and product leadership so that security is built in and aligned with business objectives.

Your responsibilities:

Testing & methodology leadership

Collaborate with the Team Lead, Application & Software Security to develop and own the application security testing methodology and standards across web, API, mobile and AI/LLM domains.
Lead the most complex, novel and high-risk security assessments, including original research and the development of new testing techniques and tooling.
Own the organization-wide triage, escalation and evidence-quality framework across all security testing and scanning functions and define how L1–L3 teams are trained and measured against it.
Support the direction for the penetration testing and offensive security program.
Own the most advanced threat modelling for critical and cross-cutting architecture.
Serve as the organization's authority and final technical escalation point for application security.

DevSecOps & secure SDLC

Drive the integration of security into the SDLC and CI/CD pipelines, championing a proactive, risk-based, “shift-left” approach.
Develop the organization-wide standards for remediation verification, retest evidence and release closure, ensuring security gating is consistently and appropriately applied across all release pipelines.
Design and deploy an automated security framework for robust tooling and processes, using scripting and open-source solutions.
Collaborate with Engineering for the selection, deployment and management of security scanning tools (SAST, DAST, SCA, container) within CI/CD pipelines, integrating them via APIs and plugins using agile delivery methods.
Serve as the liaison for DevSecOps standards and provide input into new standards and policies.
Review and analyze vulnerability data to identify risk across applications, infrastructure and network, and manage false positives.
Set the organization's standards for root-cause analysis and remediation guidance on the most complex or systemic security defects and define how remediation quality is assessed across teams.

Influence, measurement & people

Define how testing coverage, quality and effectiveness are measured and drive continuous improvement.
Partner with engineering, product and architecture teams to influence secure design at scale and prioritize security investment.
Lead security sessions for engineering teams covering risks, report analysis, mitigations and process improvements.
Mentor and develop specialists, create documentation and training material, and raise the technical bar across the function.
Represent application security in cross-functional and, where appropriate, external forums.

About you:

8+ years experience across application/product security testing and DevSecOps, with expert knowledge of software security.
Experience with security frameworks (OWASP, MITRE, NIST), testing tools (SAST/DAST/SCA), scripting (Python, Java, Bash, PowerShell), and DevOps/CI-CD tooling (Git, Jenkins, Docker/Kubernetes)
Solid understanding of secure development and coding practices
Comfortable working cross-functionally with Security, Dev, and Engineering teams
Strong communicator, able to translate technical concepts for any audience
Self-directed, detail-oriented, and a sharp problem-solver

Compensation:Global Relay advertises the pay range for this role in compliance with British Columbia’s pay transparency laws. Individual pay rates are determined by evaluating factors such as expertise, skills, education, and professional background. The range below reflects the expected annual base salary, which is only one element of our comprehensive total rewards package designed to reflect our company pay philosophy, culture and values. We aim to foster an inspiring work environment and support employees' work-life rhythms. We provide a comprehensive extended health benefits program, including virtual healthcare and a wellness allowance. Employees also receive annual allotted vacation days, which increase based on tenure. Other benefits include: Paid sick days, maternity/parental enhancement program, bonus, and an RRSP contribution matching program. For Vancouver-based employees, we provide a subsidized meal program, courtesy of our talented in-house culinary team!

British Columbia - Base salary range: $125,000 CAD - $160,000 CAD

What you can expect:

At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills.

Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion.

We seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual.

To learn more about our business, culture, and community involvement, visit www.globalrelay.com.

Apply on LinkedIn About employer

More about this job

Responsibilities

The Principal Application Security Specialist leads the technical direction for application security testing and DevSecOps integration across the software development lifecycle. They are responsible for conducting complex security assessments, defining testing standards, and mentoring engineering teams to ensure security is built into all products.

Requirements

Candidates must have 8+ years of experience in application security testing and DevSecOps with expert knowledge of software security frameworks and tools. Proficiency in scripting languages and CI/CD pipeline management is required, along with strong communication skills to influence cross-functional teams.

Skills

Application security
DevSecOps
Software security
SAST
DAST
SCA
Python
Java
Bash
PowerShell
Git
Jenkins
Docker
Kubernetes
Threat modelling
Penetration testing

Benefits

Extended health benefits
Virtual healthcare
Wellness allowance
Paid vacation
Paid sick days
Maternity/parental enhancement program
Bonus
RRSP contribution matching
Subsidized meal program

Visa sponsorship

Not detected in the job text

Keywords

Application Security
DevSecOps
SAST
DAST
SCA
Python
Java
Bash
PowerShell
Git
Jenkins
Docker
Kubernetes
OWASP
MITRE
NIST
Threat Modelling
Penetration Testing
Cloud Archiving
eDiscovery
Compliance
API Security
Mobile Security
AI/LLM Security
CI/CD
Vulnerability Management
Root-cause analysis
Agile
Information Security

Report this job

Work requirements

Jobs in Canada