Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 2 months ago
EC
Manager, Software Engineering
Emburse Chrome River
Toronto, ON
- Full-time
Experience working in a scrum and DevOps environment. Good understanding of agile application development lifecycle
Added 2 months ago
T
Senior Software Engineer (Back-end/Server)
Trulioo
Vancouver, BC · Toronto, ON
- Full-time
Our offices support a hybrid model and staff typically work three days per week at a hub location · This will be a full-time, permanent position, ideally working out of the Vancouver office on a hybrid model (3-days per week in the office)
Added 4 months ago
TG
Senior Full Stack Developer (18-month contract)
TMX Group
Montreal, Quebec
- Full-time
Must Have(s)
Added 2 months ago
T
Senior Full Stack Developer (CRM), TD Securities
TD
Toronto, ON
- Full-time
Support application stability, risk reduction, and production operations, including troubleshooting, performance tuning, incident resolution, and continuous improvement initiatives.
Added 7 months ago
PC
Transformation Risk and Advisory, Senior Manager, JIRA lead
PwC Canada
Vancouver, British Columbia
- Full-time
We are seeking a full-time Senior Manager to join our Transformation Risk & Advisory team as a Jira & PMO Tooling Lead. You will shape and lead the tooling strategy that enables large…
Added 2 months ago
Technical Project Manager - Software
Acuity Inc.
Brossard, QC
The Software Project Manager will be responsible for managing software workstreams that support New Product Introduction projects, as well as independently managing pure software releases…
Added 2 months ago
T
AI/ML Engineer I
TD
Toronto, ON
- Full-time
…implement and continuously improve the framework and tools to support self-service automation of the AI and ML…
Added 2 months ago
M
Analyst III, Security Business Advisory & Consulting
Moneris
Toronto, ON
- Full-time
…work in many ways. We encourage you to apply and share, in the application form, the transferrable experience you bring, and how this will support your success in this…
Added 2 months ago
B
Manager or Team Lead, Migration Engineering
BDO
Toronto, ON
- Full-time
Lead and support application, infrastructure, database, and data migration initiatives for enterprise clients.
Added 2 months ago
M
Senior Backend Developer
Modaxo
Montreal, QC
- Full-time
…tests et à la maintenance des fonctionnalités backend de l’application (Spring Boot), de la couche de persistance (PostgreSQL ou MongoDB) jusqu’aux APIs (REST ou…
Added 2 months ago
A
Full Stack Engineering Manager, Front-End Angular/React & Back-End Java
Accenture
Ottawa, ON
- Full-time
This role will require a minimum of 3 days per week in the office
Added 4 months ago
UM
Intermediate or Senior Software Developer
Ultra Maritime
Dartmouth, Nova Scotia
- Full-time
NOTE: This position is not remote – candidates must be available to come into the office on-demand when requested to support testing activities.
Added 2 months ago
Senior Application Security Analyst
Purolator
ON · Mississauga, ON
Support the integration and tuning of Static Application Security Testing (SAST), Software Composition Analysis (SCA), secret scanning, Dynamic Application Security Testing (DAST) and other…
Added 2 months ago
Sr. Systems Engineer, Ruckus
Belden Inc
Cobourg, ON
Candidates must be based in the Montreal area and be fluent in both English and French
Added 4 months ago
MT
Senior Applications Analyst
McCarthy Tétrault LLP
Vancouver, British Columbia
- Full-time
The successful candidate must have a minimum of 7 years experience in progressive IT Experience
Added 4 months ago
MT
Senior Applications Analyst
McCarthy Tétrault LLP
Toronto, Ontario
- Full-time
The successful candidate must have a minimum of 7 years experience in progressive IT Experience
Added 4 months ago
MT
Senior Applications Analyst
McCarthy Tétrault LLP
Montreal, Quebec
- Full-time
The successful candidate must have a minimum of 7 years experience in progressive IT Experience
Added 4 months ago
MT
Senior Applications Analyst
McCarthy Tétrault LLP
Calgary, Alberta
- Full-time
The successful candidate must have a minimum of 7 years experience in progressive IT Experience
Added 4 months ago
T
DevOps Solutions Architect
Teknion
Toronto, Ontario
- Full-time
DevOps focuses on the end-to-end application lifecycle.
Added 4 months ago
KI
Engineering Project Manager (Hybrid)
Kardium Inc.
Burnaby, British Columbia
- $107,000 to $130,000 CAD / year
As an Engineering Project Manager at Kardium, you will be responsible for planning, coordinating, and driving the execution of engineering projects in a fast-paced, highly technical…
Added 4 months ago
W
Staff Software Development Engineer
Wagepoint
Remote, Canada
- $140,000 to $170,000 CAD / year
- Full-time
- Remote
Set up, deploy, and manage scalable cloud infrastructure to support application functionality and growth, with automation wherever possible.
Added 4 months ago
MI
Full Stack Developer
Magna International
Brampton, Ontario
- Full-time
Broad technology experience across multiple areas: AWS cloud architecture, application development, analytics, networking, security, storage, DevOps, containers, etc. in IoT environments,…
Added 4 months ago
U
Engineering Manager, Software Development
Univeris
Toronto, Ontario
- Full-time
…other Engineering Managers, Product Management, Architecture, DevOps, and Support to resolve cross-organizational…
Added 4 months ago
YU
Web & Automations Developer
Yorkville University
Toronto, Ontario
- Full-time
Reporting to the Manager, IT Architecture & DevOps, we are hiring a Web & Automations Developer to support and evolve Yorkville University's digital ecosystem. As our new Web & Automations…
Added 2 months ago
SG
DevOps Specialist
Scientific Games
Montreal, QC
- Full-time
Le spécialiste DevOps est un poste d'ingénierie de plateformes axé sur la pratique, dont les responsabilités comprennent la conception, la mise en place, l'automatisation et l'exploitation…

Purolator

Senior Application Security Analyst

ON, Canada
Mississauga, ON, L5N 0E1, Canada

Apply on careers.purolator.com About employer

Applications open in a new tab.

Job details

Experience: 5+ years of progressive experience in application security, secure software development, or product security
Posting language: English
Posted: Sep 4, 2026

Original job description

It’s not a package. It’s a promise®.

As Canada’s leading integrated freight, package, and logistics provider, we’ve been helping promises get where they need to be for more than 60 years. How does the magic happen? The journey starts with you. The places we go, the elements we brave, the promises we deliver – it’s all possible because of our people. So, whether you’re looking to build new skills, make an impact in your community, or inspire your team, we go there for you.

Description

Purolator is one of Canada’s leading integrated freight, package, and logistics solutions providers, delivering dependable service to customers across the country. Security is a core enabler of Purolator’s digital and operational strategy. The Information Security Office partners closely with technology and business teams to protect Purolator’s systems, data, and customers while enabling innovation and secure delivery at scale.

The Senior Application Security Analyst is responsible for embedding security into the software development lifecycle (SDLC) by partnering closely with application and engineering teams. This role focuses on identifying, assessing, and reducing application and API security risk through threat modeling, secure design reviews, vulnerability management, and the operationalization of application security controls.

The successful candidate will act as a subject matter expert for application security, providing hands‑on guidance to development teams while helping mature secure development practices across the enterprise.

Responsibilities

Application & API Security

Perform application and API security assessments, including design reviews, threat modeling, and architecture reviews, in alignment with enterprise application security standards
Identify security risks across custom‑built, SaaS, and third‑party applications and work with application owners to define practical remediation plans
Review authentication, authorization, data handling, and integration patterns to ensure secure‑by-design implementations

Secure SDLC & DevSecOps

Embed security requirements and controls early in the SDLC (“shift left”) by working directly with development and delivery teams
Support the integration and tuning of Static Application Security Testing (SAST), Software Composition Analysis (SCA), secret scanning, Dynamic Application Security Testing (DAST) and other application security tooling within CI/CD pipelines
Provide secure coding guidance and recommendations based on OWASP Top 10 and industry best practices
Develop and maintain clear, reusable documentation and standardized frameworks to enable consistent adoption of application security practices across teams

Vulnerability & Risk Management

Triage and assess application security findings from automated tools, penetration tests, and manual reviews
Partner with application teams to prioritize remediation based on risk, exploitability, and business impact

Advisory & Stakeholder Engagement

Act as a trusted security advisor to application owners, architects, and developers
Contribute to the development and maintenance of application security standards, patterns, and guidance documentation
Support third‑party assessments and security reviews for externally developed or hosted applications

Continuous Improvement

Identify opportunities to improve application security processes, tooling, and governance
Stay current with emerging application security threats, vulnerabilities, and defensive techniques

Required Qualifications

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
5+ years of progressive experience in application security, secure software development, or product security
Strong understanding of web and API technologies (HTTP/S, REST, JSON, OAuth, OpenID Connect, SAML)
Hands‑on experience with application security testing tools (SAST, SCA, DAST, secret scanning)
Solid knowledge of OWASP Top 10, threat modeling methodologies, and secure coding principles
Strong analytical, problem‑solving, and communication skills, with the ability to explain security risks to both technical and non‑technical audiences
Exceptional interpersonal skills and proven to flourish working in a fast-paced environment.
Ability to work effectively in a cross-disciplinary team, across multiple projects and multiple locations.

Additional skills that set you apart

Experience securing cloud‑native applications in AWS and/or Azure environments
Familiarity with API gateways, WAFs, and runtime protection controls
Experience working in agile or DevOps delivery environments
Relevant security certifications (e.g., CSSLP, GWAPT, GWEB, CISSP, OSCP)
Strong knowledge of one or more modern programming languages (e.g. Python, Java, C++, JavaScript)

The work we do at Purolator impacts every Canadian. To work with us, you must be eligible to obtain a Reliability Security Clearance.

Language Requirement: Proficiency in English is required for this position due to the frequent communications that must be conducted in English with various stakeholders. This requirement is justified by the nature of the responsibilities and operational needs.

POSTING DETAILS
Location: 530 - Corporate
Working Conditions: Office Environment

Reports to: Technology Manager Information Security Office
---

Purolator is an equal opportunity employer committed to diversity and inclusion. We welcome all qualified applicants and provide accommodations during the recruitment process upon request.

Purolator complies with Canadian law in all recruitment practices. During pre-screening, we may use an Artificial Intelligence (AI) tool, supported by human oversight, to efficiently manage tasks such as resume screening and candidate matching, enabling our team to connect with qualified candidates faster.

Personal information is used solely for recruitment and managed in accordance with privacy legislation. For AI-related inquiries only, contact TalentCOE@purolator.com. To apply, visit our Careers Page.

We recognize that employees and their families are essential to our success. We strive to provide a safe, healthy, and supportive workplace, ensuring the right people have the tools they need to thrive.

Every day at Purolator is an opportunity to connect with colleagues, customers, and communities to make a positive impact. Learn more about our values at www.purolator.com.

Apply on careers.purolator.com About employer

More about this job

Responsibilities

The role focuses on embedding security into the software development lifecycle through threat modeling, secure design reviews, and vulnerability management. The analyst will partner with engineering teams to operationalize security controls and provide expert guidance on secure coding practices.

Requirements

Requires a Bachelor's degree in Computer Science or a related field and over 5 years of experience in application or product security. Candidates must possess strong knowledge of web/API technologies, security testing tools, and OWASP principles.

Skills

Application Security
API Security
Threat Modeling
Secure SDLC
DevSecOps
SAST
DAST
SCA
OWASP Top 10
Vulnerability Management
Cloud Security
Secure Coding

Visa sponsorship

Not detected in the job text

Keywords

Application Security
API Security
SDLC
DevSecOps
SAST
SCA
DAST
OWASP Top 10
Threat Modeling
AWS
Azure
OAuth
OpenID Connect
SAML
REST
JSON
CSSLP
GWAPT
GWEB
CISSP
OSCP
Python
Java
C++
JavaScript
WAF
API Gateway
Reliability Security Clearance
Vulnerability Management
Secure Coding

Report this job

Work requirements

Jobs in Canada