Find work in Canada.

327,066 jobs across our Canadian network. How we count

Jobs in Canada

Save this search

Added 12 days ago
Senior Java Full Stack Developer - GFT TORONTO
RBC
Toronto, ON
Full-time
Agile Methodology, Agile Methodology, Apache Kafka, Application Security, AWS Cloud Computing, Big Data, Big Data Processing, Caching, CI/CD, Cloud Computing, Containerization, DevOps,…
Added 1 month ago
Manager, Data Engineering
Moneris
Toronto, Ontario
Full-time
Programming and scripting proficiency in Python, Scala, or Java.
Added 2 months ago
L4 Software Developer
TELUS Digital
Remote, Canada
$110,000 to $115,000 CAD / year
Full-time · Remote
…ideal for a hands-on technical leader with strong experience in Java development, Google Cloud Platform (GCP), cloud modernization, and enterprise application…
Added 17 days ago
Senior Application Security Analyst
Purolator
ON · Mississauga, ON
The Senior Application Security Analyst is responsible for embedding security into the software development lifecycle (SDLC) by partnering closely with application and engineering teams.…
Added 1 month ago
Senior Agentic Software Engineer
Lantern
Edmonton, AB
Lead large-scale Java application modernization initiatives
Added 2 months ago
Principal Software Developer – Data Architect
Caseware
Toronto, Ontario
Full-time
We are seeking a Principal Software Developer – Data Architect to drive the technical vision and architectural
Added 3 months ago
Software Developer – Back End
Symbiotic Digital
Unorganized North Algoma, Ontario · Downtown Toronto (Ryerson), Ontario
Contract
in at least one programming language: Java, Python, SQL, or
Added 26 days ago
Principal Engineer, Engineering Productivity & Tooling
Netskope
Toronto, ON
…systems that enable our engineers to deliver industry-leading security products with speed and quality. We are looking for an experienced Principal Software Engineer to own and drive our…
Added 1 month ago
Developer, Cloud Engineering - Contract Full Time for 12 Months
Scotiabank
Toronto, ON
Full-time
Experience with application security tooling (e.g., Snyk, WebInspect, CheckMarx, BlackDuck, SonarQube) and logging and monitoring tooling (e.g., Splunk, Balabit, Dynatrace)
Added 3 months ago
Full Stack Developer
Magna International
Brampton, Ontario
Full-time
Broad technology experience across multiple areas: AWS cloud architecture, application development, analytics, networking, security, storage, DevOps, containers, etc. in IoT environments,…
Added 3 months ago
DevOps Developer
Caseware
Toronto, Ontario
$125,000 to $140,000 CAD / year
Full-time
You will shape the developer experience for teams shipping TypeScript, Angular, NestJS, Java services, serverless workloads, and AWS cloud infrastructure.
Added 1 month ago
Firmware Engineer, Principal
Qualcomm
Toronto, ON
Full-time
4+ years of work experience with Programming Language such as C, C++, Java, Python, etc.
Added 2 months ago
Senior Technical Support Analyst
Verily
Remote, Canada
Full-time · Remote
3+ years experience working with Python, or other object oriented programming languages (e.g. Java, C++).
Added 1 month ago
Senior Manager, Data Engineering
Moneris
Remote, Canada
Full-time · Remote
Proficiency in Python, Scala, Java, or similar programming languages.
Added 3 months ago
Senior Geographic Information System Analyst
ADGA Group Consultants Inc
Ottawa, Ontario
$80 to $120 CAD / hour
Contract
Languages: JavaScript, TypeScript, Python, Java, SQL, HTML/CSS
Added 21 days ago
DevOps Specialist
Scientific Games
Montreal, QC
Full-time
…relentless innovation, legendary performance, and unwavering security to responsibly propel the global lottery industry ever…
Added 3 months ago
Lead Full Stack Developer
Publicis Groupe Holdings B.V
Toronto, Ontario
Full-time
Strong backend depth in at least one modern stack (Java/Spring Boot, Python/FastAPI, Node, Go, .NET); able to ramp on the others.
Added 10 days ago
Software Engineer, Global Payments Technology
Scotiabank
Toronto, ON
Familiar with languages, frameworks, and databases (such as Java/Spring, Node.js/Express.js, Python, MySQL,PostgreSQL, MongoDB, DB2)
Added 3 months ago
Distinguished SW Systems Engineer (10343)
Extreme Networks
Toronto, ON
Full-time
Application deadline: Applications are being accepted on a rolling basis and this posting will remain open until filled.
Added 3 months ago
Principal Software Engineer - Distributed Systems
Microsoft
Vancouver, British Columbia
Full-time
Drives identification of dependencies and the development of design documents for a product, application, service or platform. Identifies other teams and technologies that will be…
Added 27 days ago
Senior Software Developer - Test Automation
General Motors
Remote, Canada
Full-time · Remote
Strong programming skills in Python, other languages such as Java, C#, or JavaScript are a bonus.
Added 18 days ago
Senior Software Engineer - Backend
Evertz Microsystems Limited
Burlington, ON
Full-time
5+ years of software engineering experience in a strongly typed language; Java preferred (Python, Rust, Go, C++, or C# also considered)
Added 3 months ago
Full Stack Developer, Tax Transformation Office
BDO
Toronto, Ontario
Full-time
Strong back-end development experience using Node.js, Python, Java, Go, or C#
Added 3 months ago
Applied AI Engineer
Bounteous
Montreal, Quebec
Full-time
5+ years of strong front-to-back engineering experience, focusing on AI ML platforms and workflows (Python or Java).
Added 9 days ago
Application Security Engineer (West Coast)
Black Duck Software, Inc.
Calgary, AB
…speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and…

Purolator

Senior Application Security Analyst

ON, Canada
Mississauga, ON, L5N 0E1, Canada

Experience: 5+ years of progressive experience in application security, secure software development, or product security
Posting language: English
Posted: Sep 4, 2026

Apply About employer

Applications open in a new tab.

Original job description

It’s not a package. It’s a promise®.

As Canada’s leading integrated freight, package, and logistics provider, we’ve been helping promises get where they need to be for more than 60 years. How does the magic happen? The journey starts with you. The places we go, the elements we brave, the promises we deliver – it’s all possible because of our people. So, whether you’re looking to build new skills, make an impact in your community, or inspire your team, we go there for you.

Description

Purolator is one of Canada’s leading integrated freight, package, and logistics solutions providers, delivering dependable service to customers across the country. Security is a core enabler of Purolator’s digital and operational strategy. The Information Security Office partners closely with technology and business teams to protect Purolator’s systems, data, and customers while enabling innovation and secure delivery at scale.

The Senior Application Security Analyst is responsible for embedding security into the software development lifecycle (SDLC) by partnering closely with application and engineering teams. This role focuses on identifying, assessing, and reducing application and API security risk through threat modeling, secure design reviews, vulnerability management, and the operationalization of application security controls.

The successful candidate will act as a subject matter expert for application security, providing hands‑on guidance to development teams while helping mature secure development practices across the enterprise.

Responsibilities

Application & API Security

Perform application and API security assessments, including design reviews, threat modeling, and architecture reviews, in alignment with enterprise application security standards
Identify security risks across custom‑built, SaaS, and third‑party applications and work with application owners to define practical remediation plans
Review authentication, authorization, data handling, and integration patterns to ensure secure‑by-design implementations

Secure SDLC & DevSecOps

Embed security requirements and controls early in the SDLC (“shift left”) by working directly with development and delivery teams
Support the integration and tuning of Static Application Security Testing (SAST), Software Composition Analysis (SCA), secret scanning, Dynamic Application Security Testing (DAST) and other application security tooling within CI/CD pipelines
Provide secure coding guidance and recommendations based on OWASP Top 10 and industry best practices
Develop and maintain clear, reusable documentation and standardized frameworks to enable consistent adoption of application security practices across teams

Vulnerability & Risk Management

Triage and assess application security findings from automated tools, penetration tests, and manual reviews
Partner with application teams to prioritize remediation based on risk, exploitability, and business impact

Advisory & Stakeholder Engagement

Act as a trusted security advisor to application owners, architects, and developers
Contribute to the development and maintenance of application security standards, patterns, and guidance documentation
Support third‑party assessments and security reviews for externally developed or hosted applications

Continuous Improvement

Identify opportunities to improve application security processes, tooling, and governance
Stay current with emerging application security threats, vulnerabilities, and defensive techniques

Required Qualifications

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
5+ years of progressive experience in application security, secure software development, or product security
Strong understanding of web and API technologies (HTTP/S, REST, JSON, OAuth, OpenID Connect, SAML)
Hands‑on experience with application security testing tools (SAST, SCA, DAST, secret scanning)
Solid knowledge of OWASP Top 10, threat modeling methodologies, and secure coding principles
Strong analytical, problem‑solving, and communication skills, with the ability to explain security risks to both technical and non‑technical audiences
Exceptional interpersonal skills and proven to flourish working in a fast-paced environment.
Ability to work effectively in a cross-disciplinary team, across multiple projects and multiple locations.

Additional skills that set you apart

Experience securing cloud‑native applications in AWS and/or Azure environments
Familiarity with API gateways, WAFs, and runtime protection controls
Experience working in agile or DevOps delivery environments
Relevant security certifications (e.g., CSSLP, GWAPT, GWEB, CISSP, OSCP)
Strong knowledge of one or more modern programming languages (e.g. Python, Java, C++, JavaScript)

The work we do at Purolator impacts every Canadian. To work with us, you must be eligible to obtain a Reliability Security Clearance.

Language Requirement: Proficiency in English is required for this position due to the frequent communications that must be conducted in English with various stakeholders. This requirement is justified by the nature of the responsibilities and operational needs.

POSTING DETAILS
Location: 530 - Corporate
Working Conditions: Office Environment

Reports to: Technology Manager Information Security Office
---

Purolator is an equal opportunity employer committed to diversity and inclusion. We welcome all qualified applicants and provide accommodations during the recruitment process upon request.

Purolator complies with Canadian law in all recruitment practices. During pre-screening, we may use an Artificial Intelligence (AI) tool, supported by human oversight, to efficiently manage tasks such as resume screening and candidate matching, enabling our team to connect with qualified candidates faster.

Personal information is used solely for recruitment and managed in accordance with privacy legislation. For AI-related inquiries only, contact [email protected]. To apply, visit our Careers Page.

We recognize that employees and their families are essential to our success. We strive to provide a safe, healthy, and supportive workplace, ensuring the right people have the tools they need to thrive.

Every day at Purolator is an opportunity to connect with colleagues, customers, and communities to make a positive impact. Learn more about our values at www.purolator.com.

Apply About employer

More about this job

Responsibilities

The role focuses on embedding security into the software development lifecycle through threat modeling, secure design reviews, and vulnerability management. The analyst will partner with engineering teams to operationalize security controls and provide expert guidance on secure coding practices.

Requirements

Requires a Bachelor's degree in Computer Science or a related field and over 5 years of experience in application or product security. Candidates must possess strong knowledge of web/API technologies, security testing tools, and OWASP principles.

Skills

Application Security
API Security
Threat Modeling
Secure SDLC
DevSecOps
SAST
DAST
SCA
OWASP Top 10
Vulnerability Management
Cloud Security
Secure Coding

Visa sponsorship

Not detected in the job text

Keywords

Application Security
API Security
SDLC
DevSecOps
SAST
SCA
DAST
OWASP Top 10
Threat Modeling
AWS
Azure
OAuth
OpenID Connect
SAML
REST
JSON
CSSLP
GWAPT
GWEB
CISSP
OSCP
Python
Java
C++
JavaScript
WAF
API Gateway
Reliability Security Clearance
Vulnerability Management
Secure Coding

Report this job