Find work in Canada.

483,861 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 1 hour ago
A
Senior Python Developer
Ampliwork
Brossard, QC
- Full-time
While experience with Generative AI and agentic systems is important, we are primarily looking for a strong senior Python engineer who knows how to build reliable, scalable enterprise…
Added 1 hour ago
A
Senior Python Developer
Ampliwork
Montreal, QC
- Full-time
While experience with Generative AI and agentic systems is important, we are primarily looking for a strong senior Python engineer who knows how to build reliable, scalable enterprise…
Added 3 hours ago
S
Associate Platform Engineer - Fintech
SweetTech
Montreal, QC
- Full-time
…and where a change belongs so it can benefit more than one…
Added 5 hours ago
TL
CTO (Chief Technology Officer)
Total Life, Inc.
Remote, Canada
- Full-time
- Remote
Lead AI-first product development. You will design and scale AI systems that run in real clinical and operational workflows. One example is Lily, our AI companion, which calls patients to…
Added 5 hours ago
E
Principal Software Engineer
EngRadar
Kitamaat 2, BC
- Full-time
This is a senior, hands-on role for an engineer who wants influence beyond a single product team. You’ll work in a highly connected environment, on a small team that supports a large…
Added 7 hours ago
WV
Mechanical Engineer
Wave Visas Immigration Consultants in Delhi
AB · Alberta, Canada
- Full-time
Participate in product development, testing, and continuous improvement initiatives.
Added 23 hours ago
V
Security Engineer
Varicent
Toronto, ON
- Full-time
The Security Engineer is a fully qualified, career-level engineer who independently owns defined security workstreams across operations and engineering. You will own the day-to-day health…
Added 23 hours ago
Security Engineer
Varicent
Toronto, ON
The Security Engineer is a fully qualified, career-level engineer who independently owns defined security workstreams across operations and engineering. You will own the day-to-day health…
Added 1 day ago
R
Ingénieur Manufacturier Senior - Réparation de composants / Senior Manufacturing Engineer - Componen
Rolls-Royce
Montreal, QC
- Full-time
Ingénieur Manufacturier Senior - Réparation de composants
Added 1 day ago
P
Site Reliability Engineer
Punt
Vancouver, BC
- $120,000 to $170,000 CAD / year
- Full-time
We’re seeking a Senior Site Reliability Engineer to join Production Engineering, the team that help advance our infrastructure, security, reliability, and platform maturity. This is a…
Added 1 day ago
SF
Senior Application Security Engineer III
Spring Financial Inc.
Vancouver, BC
- Full-time
As a Senior Application Security Engineer at Spring, you are a technical leader and a trusted problem solver who works at the intersection of security, engineering, and the business. You…
Added 1 day ago
CC
Senior Embedded Linux Engineer
Corinex Communications
Vancouver, BC
- Full-time
We are looking for a Senior Embedded Linux / BSP Platform Engineer with strong, hands-on experience in embedded Linux development, board bring-up, and system-level debugging.
Added 1 day ago
GV
Senior Cybersecurity Engineer (Center of Excellence)
GE Vernova
Markham, ON
- $146,200 to $219,200 CAD / year
- Full-time
We are looking for a senior OT cybersecurity engineer to join the Grid Automation Cybersecurity Center of Excellence (COE). The COE is a new central team within the Grid Automation OT…
Added 1 day ago
SF
Senior Application Security Engineer III
Spring Financial
Vancouver, BC
- Full-time
As a Senior Application Security Engineer at Spring, you are a technical leader and a trusted problem solver who works at the intersection of security, engineering, and the business. You…
Added 1 day ago
Principal Software Engineer
Conga
Canada
This is a senior, hands-on role for an engineer who wants influence beyond a single product team. You’ll work in a highly connected environment, on a small team that supports a large…
Added 1 day ago
B
Software Developer, DevOps
Benevity
Remote, Canada
- Full-time
- Remote
Benevity is looking for a Senior DevOps Developer to own and operate the cloud infrastructure and developer platforms that our product teams build on every day. In this hands-on engineering…
Added 1 day ago
HA
Senior Software Engineer
H2 Analytics
Remote, Canada
- $120,000 to $170,000 CAD / year
- Full-time
- Remote
You are a well-rounded senior software engineer with at least 6 years of experience building complex web applications and backend services as a full-stack engineer, with a minimum of 2…
Added 1 day ago
Q
Senior Software Engineer
Querentia
Toronto, ON
- Contract
Our client is looking for a Senior Front-End Developer to build and maintain the accessible, responsive, user-facing side of a large enterprise platform. You'll turn approved research,…
Added 1 day ago
T
.NET/C# Engineer, TD Securities
TD
Toronto, ON
- Full-time
We are looking for a Senior Engineer to join the Securitization Technology team and embrace a broad range of tasks associated with developing application and systems solutions to address…
Added 1 day ago
II
Sr. Java Developer
ITC Infotech
Vancouver, BC
- $81,194 to $117,853 CAD / year
- Full-time
We are looking for a Senior Java Microservices Engineer (Digital Asset Management) to design, develop, and maintain scalable backend applications using Java, Spring Boot, and Kafka. The…
Added 1 day ago
EF
Senior Software Engineer, Finance System
Element Fleet Management
Toronto, ON
- Full-time
As a Senior Software Engineer, Finance System, you will design, develop, and maintain scalable software solutions that support Element’s enterprise financial systems and digital…
Added 1 day ago
SL
Senior Data Engineer
Sun Life
Toronto, ON · Waterloo, ON · Sun Life Toronto One York
- Full-time
Reporting to the Manager of Data Engineering, the Senior Business Data Engineer will be a key member of Data Enablement Team responsible for building enriched data products that provide…
Added 1 day ago
Full Stack Software Developer
GHD Group Pty Ltd
Waterloo, ON
…Developer to join our Waterloo, Ontario office. You're a strong engineer with 5+ years of experience who enjoys solving real problems as much as writing good code. You'll build software…
Added 1 day ago
M
Senior Java Full Stack Developer
Miratech
Toronto, ON
- Full-time
This role suits a strong hands-on engineer who is equally comfortable on the front end and the back end, and who can take part in solution design as well as delivery. You will translate…
Added 1 day ago
M
Senior Java Full Stack Developer
Miratech
Toronto, ON
- Full-time
This role suits a strong hands-on engineer who is equally comfortable on the front end and the back end, and who can take part in solution design as well as delivery. You will translate…

Spring Financial Inc.

Senior Application Security Engineer III

Vancouver, BC, V7X 1M8, Canada

Competitive annual salary ranging from $130,000 to $150,000, reflective of experience and impact. · Full-time

Apply About employer

Applications open in a new tab.

Job details

Pay: Competitive annual salary ranging from $130,000 to $150,000, reflective of experience and impact.
Job type: Full-time
Posting language: English
Posted: Oct 23, 2026

Original job description

About us:
Spring Financial is a Canadian financial technology company focused on making every day financial services simpler, faster, and more accessible.

We build technology that helps Canadians build credit, save money, and access lending products without unnecessary friction. Our platforms allow customers to apply and manage their finances online, by text, or over the phone, making the experience convenient and flexible.

Since launching in 2014, Spring has grown into one of Canada’s largest fintechs, with over 250,000+ product originations across credit-building products, personal lending, and mortgage solutions. We’re a fast-growing, product-driven team that values practical solutions, strong execution, and thoughtful collaboration. We give people ownership, trust them to make decisions, and focus on building systems that scale reliably.

If you’re interested in working on real-world fintech platforms used by hundreds of thousands of Canadians, Spring offers the opportunity to make a tangible impact through well-built technology.

NOTE: This is a full-time, permanent, hybrid position in downtown Vancouver. 3 set days in the office and 2 WFH.

About the role:

As a Senior Application Security Engineer at Spring, you are a technical leader and a trusted problem solver who works at the intersection of security, engineering, and the business. You own Spring’s application security strategy and roadmap, aligning initiatives with risk priorities, business needs, and platform evolution. You collaborate closely with product engineering, DevOps, platform, and compliance leaders to deeply understand the “why” behind the work, ensuring the controls you design directly support customer trust, regulatory commitments, and Spring’s ability to ship quickly without compromise.

You lead the design and rollout of secure development practices that span the organization, including threat modeling, secure code review, dependency management, and static and dynamic analysis. You own and evolve Spring’s Secure Development Lifecycle, embedding security reviews, tooling, and guardrails into CI/CD workflows so security becomes part of how engineers build, not a gate they navigate around. You bring architectural foresight to the most sensitive systems we operate, balancing competing constraints, identifying long-term risks, and making thoughtful trade-offs between speed, defense-in-depth, and developer experience. You have a track record of making security simpler, more reliable, and more maintainable over time, and of influencing others to do the same.

This is primarily an individual contributor role, but you may lead a small team of engineers or act as the technical owner for application security across the organization. You lead by example through strong technical execution, collaborative problem-solving, and a practical, risk-aware approach to security. You evaluate and implement security tools and services (e.g., SAST, DAST, SBOM, secrets scanning, WAF, CSPM) that improve detection and resilience, and you measure their impact rather than their presence.

You model and champion the use of AI tools in the application security process, using them to increase coverage, speed, and exploratory capacity across reviews, threat modeling, and detection engineering. You help others adopt AI responsibly, and you remain critical of its output, especially in security-sensitive contexts where confident wrong answers are dangerous. You set the bar for testing, automation, and operational excellence in everything appsec touches.

You are a strong partner to engineering leadership, product, compliance, and the executive team. You help leaders frame complex security trade-offs, clarify ambiguous risks, and align technical decisions with business strategy. You own or contribute to incident response for application-related exposures, lead post-incident learning, and translate findings into systemic improvements. You support Spring’s compliance posture, including SOC 2 readiness and audit participation, and you track and communicate Spring’s application security posture through clear metrics, risk registers, and executive-level reporting. You mentor application security engineers and elevate the practice across Spring.

What you’ll do:

Shape and drive Spring’s application security strategy and roadmap, aligning initiatives with risk priorities, business priorities, and platform evolution.
Lead the definition and rollout of secure development practices across engineering: threat modeling, secure code review, dependency management, and static and dynamic analysis.
Define and manage Spring’s SDL, embedding security reviews, tooling, and guardrails into CI/CD workflows and moving them from advisory to enforced with clear exception handling.
Partner with engineering, DevOps, and platform teams to identify and remediate security risks across applications, services, APIs, and cloud environments.
Evaluate, select, and implement security tools and services (e.g., SAST, DAST, SBOM, secrets scanning, WAF, CSPM) that meaningfully improve detection and resilience.
Champion the responsible use of AI in application security workflows, and identify opportunities to integrate AI into Spring’s security tooling and detection capabilities.
Set the security bar for AI-powered features and internal AI tooling, including risks such as prompt injection, data leakage, and excessive agent permissions.
Own or contribute to incident response for application-related vulnerabilities and exposures, leading post-incident learning and turning findings into systemic improvements.
Support Spring’s compliance posture, including SOC 2 readiness, audit participation, and evidence gathering for application-level controls and privacy obligations (e.g., PIPEDA).
Act as a subject matter expert for product and engineering teams on secure architecture, data protection, and third-party risk.
Mentor and grow the appsec team, supporting both technical depth and cross-functional influence; may lead a small team of engineers.
Track and communicate security posture through clear metrics, risk registers, and executive-level reporting.

What we're looking for:

Requirements

5+ years of experience in application security, software engineering, or security engineering, including at least 2 years leading security initiatives or acting as a technical owner.".
Deep knowledge of web and cloud application security principles, the OWASP Top 10, and secure coding best practices.
Proven experience implementing SDL processes and integrating security into CI/CD pipelines and agile environments.
Define how vulnerabilities are prioritized, tracked, and closed across Spring, including remediation targets, exceptions, and risk acceptance.
Fluency in threat modeling frameworks (e.g., STRIDE, PASTA) and secure architecture reviews for business-critical systems.
Strong familiarity with cloud-native architecture (e.g., AWS, microservices, containerization, API gateways).
Deep hands-on experience operating automated security testing at scale, including tuning, noise reduction, and measuring effectiveness. (e.g., Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, or similar).
Solid understanding of common identity, access, and secrets management patterns (e.g., OAuth/OIDC, SSO, token handling, cloud IAM and least privilege).
Track record of leading cross-functional security initiatives and influencing engineering and business stakeholders without authority.
Strong grasp of AI tools relevant to application security and their appropriate, responsible use, and of the security risks AI introduces into applications.
Experience supporting compliance initiatives such as SOC 2, PCI DSS, privacy regulations (e.g., PIPEDA) or ISO 27001 is a plus.

Nice to have

A relevant security certification (e.g. OSCP, OSWE, BSCP, or AWS Security Specialty)
AI security training or certification (e.g., AWS Certified AI Practitioner, Hack The Box AI Red Teamer path, OSAI)
Regular hands-on practice (e.g., PortSwigger Web Security Academy, Hack The Box)
Bug bounty findings or security research or open-source security contributions.
Experience building or scaling a security program at a growth-stage company

What We Will Give You:

Competitive annual salary ranging from $130,000 to $150,000, reflective of experience and impact.
Comprehensive benefits package, including extended health, dental, and vision coverage - with 100% of monthly premiums covered by the Spring.
GRSP matching program to support your long-term financial goals.
A modern, collaborative workspace in the heart of downtown Vancouver.
Ongoing career growth opportunities

Please note: Upon applying, our Talent Acquisition team will review your resume. If you qualify, we will reach out to learn more about your experience and answer any questions you may have about the role, benefits, compensation, and more. Due to high application volume, we may not be able to respond to everyone.

Thank you for your interest! We appreciate your time and look forward to reviewing your application!

Apply About employer

More about this job

Responsibilities

You will own the application security strategy and roadmap, embedding secure development practices into CI/CD workflows. You will also lead incident response efforts, mentor the security team, and partner with engineering to ensure robust security across all platforms.

Requirements

Candidates must have at least 5 years of experience in application or security engineering with a strong background in cloud-native architecture and secure coding. Proficiency in threat modeling, automated security testing tools, and compliance frameworks like SOC 2 is required.

Skills

Application security
Threat modeling
Secure code review
CI/CD
Cloud security
SAST
DAST
OWASP Top 10
Identity and access management
Risk management
Incident response
Compliance
SOC 2
API security
Mentorship
AI security

Benefits

Extended health coverage
Dental coverage
Vision coverage
GRSP matching program

Visa sponsorship

Not detected in the job text

Keywords

Application Security
Fintech
AWS
Microservices
Containerization
Snyk
GitHub Advanced Security
Burp Suite
Semgrep
Checkov
OAuth
OIDC
SSO
SOC 2
PCI DSS
PIPEDA
ISO 27001
STRIDE
PASTA
AI
Prompt Injection
Secure Development Lifecycle
WAF
CSPM
SBOM
Secrets Scanning
DevOps
Cloud-native
Risk Assessment
Compliance

Report this job