Find work in Canada.

338,033 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 8 mins ago
P&
Ingenieur(e) de projets / Project Engineer
Pratt & Whitney
Longueuil, QC
- Full-time
Added 8 mins ago
LC
Ingénieur senior (Gestionnaire, projet ingénierie)
Lactalis Canada
Granby, QC
- Full-time
Lead CAPEX development project plans (ranging from small and medium-sized to large-scale projects), schedules, and budgets.
Added 8 mins ago
M
Sr Mgr Finance
Medline
Burlington, ON
- Full-time
Develop and mentor staff through on-boarding, open communication, training and development opportunities and performance management processes; build and maintain employee morale and…
Added 8 mins ago
B
Account Executive, Enterprise
BrainStation
Toronto, ON
- Full-time
Build and grow relationships with C-suite executives, business leaders, and the leaders of AI, Product, Marketing, Design, and Data teams, and lead strategic conversations about how their…
Added 8 mins ago
BS
Technology Delivery Lead
Brainhunter Systems Ltd
Toronto, ON
- Contract
The Technology Delivery Lead is a customer first individual accountable for the execution of their projects and initiatives. The role covers all aspects of the software development…
Added 8 mins ago
GL
Supervisor, R&D Technical Operations
Gay Lea Foods
Hamilton, ON
- Full-time
…equipment and maintaining high standards of food safety and product manufacturing. This role ensures that both the Analytical Lab and Pilot Plant operate smoothly in alignment with R&D…
Added 8 mins ago
O
Revenue Enablement Specialist, XDR
Owner.com
Toronto, ON · Greater Toronto Area, Canada
- Full-time
…apply that experience to building training, onboarding, and development programs that actually move the needle. Formal enablement experience is a plus, but deep sales credibility is the…
Added 8 mins ago
B
Senior Strategist, Enterprise
BrainStation
Toronto, ON
- Full-time
Build and deepen relationships with C-suite executives, business leaders, and the leaders of AI, Product, Marketing, Design, and Data teams, and lead strategic conversations about how their…
Added 8 mins ago
IF
Senior Sales Director
Infosys Finacle
Toronto, ON
- $150,000 to $200,000 CAD / year
- Full-time
Lead the complete sales cycle: Prospect → Qualify → Solution Positioning → Proposal → Negotiation → Closure.
Added 8 mins ago
US
Renewables Software Sales Specialist - Canada
UL Solutions
Canada
- Full-time
Deliver tailored demonstrations of Windnavigator, Windographer, Openwind, and RAMP connecting product capabilities to customer workflows from site prospecting and resource assessment…
Added 8 mins ago
T
Oracle / PostgreSQL Database Administrator
TD
Mississauga, ON
- Full-time
…opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been…
Added 8 mins ago
VT
Change Management Specialist - AI Adoption
Vision Talent Co.
Toronto, ON
- $85 to $90 CAD / hour
- Contract
The Change Manager will lead the people and process side of AI adoption across Technology and Operations teams. This role owns the change strategy for rolling out AI tools and workflows…
Added 9 mins ago
DI
Cost Accounting Manager
Drake International
Vaughan, ON
- $100,000 to $130,000 CAD / year
- Full-time
…play a critical role in ensuring accurate inventory valuation, product costing, financial reporting, and operational analysis. Your insights will help drive strategic decision-making while…
Added 9 mins ago
L
Senior Patent & IP Counsel
Lyten
Burlington, ON
- Full-time
Lyten is seeking to hire its first Patent & IP Counsel to build and lead the company's intellectual property function, with a focus on patent strategy, hands-on drafting and prosecution,…
Added 9 mins ago
JW
Senior Software Engineer, Tokenization
Jobs Web3
Toronto, ON
- Full-time
…sync with traditional brokerage and ledger systems. You'll lead technically complex projects end to end, make architectural decisions on a foundational Robinhood initiative, and work in a…
Added 9 mins ago
R
Director, Delivery & Implementation
RewardOps
Canada
- Full-time
…escalation point for strategic engagements, and a key partner to Product, Engineering, Sales, Customer Success, Support, and Partnerships…
Added 9 mins ago
A
Senior Azure Applications Developer : Toronto/Markham ON : Contract
AceStack
Toronto, ON
- $50 to $55 CAD / hour
- Contract
…Developer with extensive experience in cloud-based application development, specifically within the Microsoft Azure ecosystem. In this role, you will be responsible for designing,…
Added 9 mins ago
B
Senior Product Manager, Intelligence
Braze
Toronto, ON
- Part-time
We’re hiring a Senior Product Manager for Braze’s Intelligence team.
Added 9 mins ago
R
Implementation & Support Lead
RADPAIR
Canada
- Full-time
The Implementation & Support Lead owns and drives the technical execution of client onboarding, implementation, and post–go-live support for RADPAIR’s AI-powered radiology platform. This…
Added 9 mins ago
G
Demand Generation Manager
Guusto
Canada
- Full-time
This is a senior individual contributor role. Our Director of Growth Marketing will lead strategy and our rapidly-growing partner channel. You’ll keep the core engine running and improving,…
Added 9 mins ago
FC
FLIGHT CENTRE TRAVEL GROUP - POWER PLATFORM & AI SOLUTIONS SPECIALIST - TORONTO, ON
Flight Centre Travel Group Canada
ON · Ontario, Canada
- Full-time
This role offers the opportunity to lead the design, orchestration, validation, and optimization of AI-generated applications and automations while ensuring quality, security, governance,…
Added 9 mins ago
A
Manager, Data Engineering
Avanade
Toronto, ON
- Full-time
Lead the development of data and analytics platforms, real time intelligence and reporting solutions using Python, SQL, Microsoft Azure Data Services, Fabric and Databricks.
Added 9 mins ago
K
Supervisor, Welding Shop
Komatsu
Sparwood, BC
- Full-time
…supporting individuals and communities through job training, skills development and giving back. As a Komatsu employee, you will be encouraged to grow alongside our global company,…
Added 9 mins ago
HC
Research And Development Manager
Highbury Canco Corporation
Leamington, ON
- $97,000 to $115,000 CAD / year
- Full-time
We are currently seeking an experienced and innovative Research & Development Manager to lead the development, commercialization, and continuous improvement of our food products and…
Added 10 mins ago
O
Revenue Enablement Specialist, XDR
Owner.com
Remote, Canada
- Full-time
- Remote
…apply that experience to building training, onboarding, and development programs that actually move the needle. Formal enablement experience is a plus, but deep sales credibility is the…

Spring Financial

Application Security Engineer II

Vancouver, BC, Canada

Competitive annual salary ranging from $85,000 to $115,000, reflective of experience and impact. · Full-time

Apply About employer

Applications open in a new tab.

Job details

Pay: Competitive annual salary ranging from $85,000 to $115,000, reflective of experience and impact.
Job type: Full-time
Apply by: Nov 7, 2026
Experience: 3+ years of experience in application security, security engineering, or software engineering with a security focus.
Posting language: English
Posted: Oct 8, 2026

Original job description

About Us

Spring Financial is a Canadian financial technology company focused on making every day financial services simpler, faster, and more accessible.

We build technology that helps Canadians build credit, save money, and access lending products without unnecessary friction. Our platforms allow customers to apply and manage their finances online, by text, or over the phone, making the experience convenient and flexible.

Since launching in 2014, Spring has grown into one of Canada’s largest fintechs, with over 250,000+ product originations across credit-building products, personal lending, and mortgage solutions. We’re a fast-growing, product-driven team that values practical solutions, strong execution, and thoughtful collaboration. We give people ownership, trust them to make decisions, and focus on building systems that scale reliably.

If you’re interested in working on real-world fintech platforms used by hundreds of thousands of Canadians, Spring offers the opportunity to make a tangible impact through well-built technology.

NOTE: This is a full-time, permanent, hybrid position in downtown Vancouver. 3 set days in the office and 2 WFH.

About The Role

As an Application Security Engineer II, you are an experienced practitioner who works independently to secure Spring’s applications, services, and APIs. You take ownership of application security across one or more product domains and play a central role in keeping those systems safe as they evolve. You understand the “why” behind the work, connecting security decisions to customer trust, regulatory commitments, and business outcomes. You demonstrate good judgment when working through ambiguity and elevate the security posture of the systems and teams around you.

You are responsible for designing and delivering moderately complex application security work, often navigating evolving requirements and unclear boundaries. You lead threat modeling sessions for new features, run secure code reviews on high-risk changes, and partner with engineering teams to remediate vulnerabilities in code, configurations, and dependencies. You help move security controls from advisory to enforced, with clear exception handling, so they protect delivery without blocking it unnecessarily. This is a core part of our current work. You make pragmatic choices that balance security rigor with delivery velocity, and you help teams understand which risks matter most. You contribute actively to Spring’s Secure Development Lifecycle (SDL), identifying gaps and proposing improvements that scale across engineering.

You are expected to use AI-powered tools to improve your productivity, especially for repetitive review tasks, vulnerability research, and remediation guidance. You incorporate these tools thoughtfully and remain accountable for validating their accuracy and security implications. You take full responsibility for the quality of your reviews and the controls you put in place. You help You help improve our automated security testing across code, dependencies, containers, infrastructure, and cloud configuration, and you treat false-positive reduction as a first-class problem because engineering trust in security tooling is a prerequisite for everything else we do.

You begin to work directly with product, engineering, and DevOps stakeholders, particularly on features that touch sensitive customer data, payment flows, or third-party integrations. You help clarify scope, translate security requirements into technical solutions, and provide insight into trade-offs and timelines. You represent application security in cross-functional conversations and take responsibility for delivering outcomes, not just findings. You also contribute to incident response, help our SOC 2 audit run smoothly by owning the evidence for application-level controls, and support cloud security and security monitoring work.

What You’ll Do

Lead threat modeling, secure code reviews, and security architecture reviews for features and services in your domains, including APIs and authentication flows.
Partner with engineering teams to remediate vulnerabilities across applications, APIs, and cloud configurations, driving issues to closure.
Own and evolve sections of Spring’s SDL, embedding security checks and guardrails into CI/CD pipelines, and moving them from advisory to enforced with clear exception handling.
Operate, tune, and improve automated security testing across code, dependencies, containers, and infrastructure, so findings are accurate and actionable. (e.g., Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov).
Help define how vulnerabilities are tracked, prioritized, and closed, including exceptions and risk acceptance."
Use AI tools to accelerate vulnerability research, code review, and remediation guidance, validating output critically, and help build AI-assisted security automation with human review gates.
Triage cloud security and monitoring findings, and contribute to logging and detection improvements
Collaborate with platform and DevOps teams on identity, access, and secrets management patterns (e.g., OAuth/OIDC, SSO, JWT token handling, Vault, AWS IAM).
Contribute to incident response for application-related vulnerabilities, including investigation, containment, and post-incident learning.
Own the application-level evidence and controls needed to support SOC 2 and other compliance obligations, including privacy (and where applicable, PCI DSS) audits.
Mentor early-career application security engineers and help raise the team’s technical bar.

Requirements

What we're looking for:

3+ years of experience in application security, security engineering, or software engineering with a security focus.
Solid working knowledge of web and cloud application security principles, the OWASP Top 10, and secure coding best practices.
Proficiency reviewing code in at least one modern language, and scripting to automate security tasks.
Hands-on experience with at least one threat modeling framework (e.g., STRIDE, PASTA) and the ability to lead a session for a moderately complex feature.
Hands-on experience running automated security testing in a development pipeline, including tuning rules and reducing false positives. (e.g., Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, or similar).
Working knowledge of AWS and cloud-native architecture (e.g., microservices, containers, API gateways).
Solid understanding of identity, access, and secrets management patterns (e.g., OAuth/OIDC, SSO, JWT token handling, Vault, AWS IAM).
Effective use of AI development and security tools in day-to-day work, and an understanding of AI-specific security risks (e.g., prompt injection, data leakage).
Strong written and verbal communication; able to influence engineers without authority.
Exposure to compliance programs such as SOC 2, PCI DSS, or ISO 27001 is a plus.

Nice to have

A relevant security certification (e.g. eJPT, OSCP, OSWE, BSCP, or AWS Security Specialty)
AI security training or certification (e.g., AWS Certified AI Practitioner, Hack The Box AI Red Teamer path or OSAI)
Regular hands-on practice (e.g., PortSwigger Web Security Academy, Hack The Box)
Bug bounty findings or CTF participation or open-source security contributions.
Experience leading incident response or post-incident reviews

What We Will Give You

Competitive annual salary ranging from $85,000 to $115,000, reflective of experience and impact.
Comprehensive benefits package, including extended health, dental, and vision coverage - with 100% of monthly premiums covered by the Spring.
GRSP matching program to support your long-term financial goals.
A modern, collaborative workspace in the heart of downtown Vancouver.
Ongoing career growth opportunities

Please note: Upon applying, our Talent Acquisition team will review your resume. If you qualify, we will reach out to learn more about your experience and answer any questions you may have about the role, benefits, compensation, and more. Due to high application volume, we may not be able to respond to everyone.

Thank you for your interest! We appreciate your time and look forward to reviewing your application!

Apply About employer

More about this job

Responsibilities

Lead threat modeling, secure code and architecture reviews, and vulnerability remediation across applications, APIs, and cloud environments. Improve the secure development lifecycle and automated security controls, support incident response and compliance evidence, and collaborate with engineering, platform, and product teams.

Requirements

Requires at least three years of application security, security engineering, or security-focused software engineering experience, along with web and cloud security knowledge, code review ability, and scripting skills. Candidates should have hands-on experience with threat modeling and pipeline security testing, working knowledge of AWS and identity and secrets management, and the ability to communicate effectively; AI security awareness is also expected.

Skills

Application Security
Threat Modeling
Secure Code Review
Security Architecture Review
OWASP Top 10
Secure Development Lifecycle
Automated Security Testing
Vulnerability Management
AWS Cloud Security
Identity and Access Management
OAuth/OIDC
Secrets Management
Incident Response
AI Security
CI/CD Security
SOC 2 Compliance

Benefits

Extended Health Coverage
Dental Coverage
Vision Coverage
GRSP Matching
Career Growth Opportunities

Visa sponsorship

Not detected in the job text

Keywords

Application Security
OWASP Top 10
Threat Modeling
STRIDE
PASTA
Secure Code Review
Secure Development Lifecycle
CI/CD
Snyk
GitHub Advanced Security
Burp Suite
Semgrep
Checkov
AWS
Microservices
Containers
API Gateways
OAuth/OIDC
SSO
JWT
Vault
AWS IAM
AI Security
Prompt Injection
Data Leakage
SOC 2
PCI DSS
ISO 27001
Incident Response
PortSwigger Web Security Academy

Report this job