Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 6 days ago
CW
Business Administrative Office Coordinator
Canadian Wealth Inc.
Calgary, AB
- Full-time
Has a strong drive for professional development and advancement.
Added 6 days ago
CF
Intermediate Observability Engineer
CI Financial
Toronto, ON
- Full-time
This role follows our in‑office work model and requires employees to be onsite four days per week to support collaboration and business needs
Added 6 days ago
D|
Intermediate Photographer and Content Creator (12 month contract)
DECIEM | THE ABNORMAL BEAUTY COMPANY
Toronto, ON
- Contract
Own the development and execution of commercial studio still photography for e-commerce packshots, global campaign moments, and digital storefronts in strict alignment with brand visual…
Added 6 days ago
S
Driver Class B Trainee
Safety-Kleen
Chambly, QC
- $25 to $27 CAD / hour
- Full-time
Schedule: Monday through Friday (day shift)
Added 6 days ago
A
Senior Government Funding Consultant
Ayming
Montreal, QC
- Full-time
Lead the preparation, development, and execution of complex funding applications.
Added 6 days ago
J
Project Controls Professional
Jacobs
Toronto, ON
- $108,900 to $149,377 CAD / year
- Full-time
Support the development and maintenance of project schedules, work plans, progress measurement systems, and performance metrics.
Added 6 days ago
RD
IT Application Security Manager
Randstad Digital
Toronto, ON
- Full-time
Application security or software development with security focus
Added 6 days ago
EC
Manager, Customer Success (Corporate Travel/SaaS)
Emburse Chrome River
Toronto, ON
- Full-time
Team Leadership & Development: Lead, coach, and evaluate a team of Travel Customer Success Managers (CSMs), driving team performance, onboarding, professional growth, and customer…
Added 6 days ago
TF
Fundraising Manager
Toronto Foundation for Student Success
Toronto, ON · North York, ON
- $90,000 to $100,750 CAD / year
- Full-time
Minimum of five years direct experience working in a fundraising/development role (or an equivalent combination of education and experience).
Added 6 days ago
S&
Retail Store Manager
SPIER & MACKAY
Mississauga, ON
- Full-time
We are looking for someone with a strong background in menswear retail, leadership, client service, and team development. The ideal candidate understands both the operational and…
Added 6 days ago
R&
Administrative Assistant III
Robertson & Company Ltd.
Quebec, QC
- Contract
Support the development and maintenance of procedures, job aids, training materials, and administrative controls.
Added 6 days ago
SF
Senior Application Security Engineer
Spring Financial
Vancouver, BC
- Full-time
As a Senior Application Security Engineer at Spring, you are a technical leader and a trusted problem solver who works at the intersection of security, engineering, and the business. You…
Added 6 days ago
AG
Proposal Coordinator
AME Group
Vancouver, BC
- $60,000 to $70,000 CAD / year
- Full-time
…in the preparation and management of proposals and business development materials. You will work closely with the project teams to create compelling, tailored proposals that meet client…
Added 6 days ago
QM
Civil CAD Technologist - Land Development & Infrastructure
Quantum Management Services Ltd.
Ottawa, ON
- $80,000 CAD / year
- Full-time
Position: Civil Engineering Technologist - Land Development & Infrastructure
Added 6 days ago
HT
Full Stack Developer
High Tech Genesis
Ottawa, ON
- Contract
…telecommunications, cloud computing, networking, and high-tech product development. As a Full Stack Developer, you will develop and maintain end-to-end software solutions, including user…
Added 6 days ago
Maintenance Person
Northland Properties
Saskatoon, SK
Must have a valid Drivers' License · Must have or be prepared to take Pool Operator's Course provided by AHS
Added 6 days ago
Country Head of Commercial Finance
DLL Group
Burlington, ON
Must have the ability to communicate, both orally and written, with other members of the team and with clients/prospective clients
Added 6 days ago
Corporate Tooling - Tooling Engineer
Mitchell Plastics
Kitchener, ON
Must have solid working knowledge of the requirements of tool actions required for the manufacturing of parts
Added 6 days ago
Staff Program Manager
Conga
Toronto, ON · Waterloo, ON · ON
…to innovate and support growth through individual and team development, all within an environment where every voice is…
Added 6 days ago
ZM
Overhead Crane Service Technician - Apprentice
Zelus Material Handling
Oakville, ON
- Full-time
Opportunities for training, skill development, and career growth
Added 6 days ago
C
Receptionist/Concierge
Chartwell
Calgary, AB
- Part-time
Opportunities for leadership development and career growth
Added 6 days ago
LC
Category Director, National OTC & Hard Discount Wellness & Feminine Hygiene (12-Month Contract)
Loblaw Companies Limited
Brampton, ON
- Full-time
…Loblaw’s culture journey and through objective setting, individual development planning and consistent timely…
Added 6 days ago
LC
Merchant, Center of Store (Wholesale Clubs)
Loblaw Companies Limited
Brampton, ON
- Full-time
…invisible, temporary or permanent) can be made at any stage of application and employment. We encourage candidates to make their accommodation needs known so that we can provide equitable…
Added 6 days ago
MS
Retail Sales Consultant (Part Time)
Mister Safety Shoes
Vaughan, ON
- Part-time
Growth: Professional development and internal advancement opportunities.
Added 6 days ago
FM
Prevention Worker - 078-2026
Fort McKay First Nation
Fort Mckay 174, AB
- Full-time
Preference will be given to qualified applicants of Indigenous ancestry in any hiring decision, please declare your Indigenous status in your application.

Spring Financial

Senior Application Security Engineer

Vancouver, BC, Canada

Competitive annual salary ranging from $130,000 to $150,000, reflective of experience and impact. · Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Pay: Competitive annual salary ranging from $130,000 to $150,000, reflective of experience and impact.
Job type: Full-time
Apply by: Dec 6, 2026
Work location: 3 set days in the office and 2 WFH
Posting language: English
Posted: Nov 6, 2026

Original job description

About Us

Spring Financial is a Canadian financial technology company focused on making every day financial services simpler, faster, and more accessible.

We build technology that helps Canadians build credit, save money, and access lending products without unnecessary friction. Our platforms allow customers to apply and manage their finances online, by text, or over the phone, making the experience convenient and flexible.

Since launching in 2014, Spring has grown into one of Canada’s largest fintechs, with over 250,000+ product originations across credit-building products, personal lending, and mortgage solutions. We’re a fast-growing, product-driven team that values practical solutions, strong execution, and thoughtful collaboration. We give people ownership, trust them to make decisions, and focus on building systems that scale reliably.

If you’re interested in working on real-world fintech platforms used by hundreds of thousands of Canadians, Spring offers the opportunity to make a tangible impact through well-built technology.

NOTE: This is a full-time, permanent, hybrid position in downtown Vancouver. 3 set days in the office and 2 WFH.

About The Role

As a Senior Application Security Engineer at Spring, you are a technical leader and a trusted problem solver who works at the intersection of security, engineering, and the business. You own Spring’s application security strategy and roadmap, aligning initiatives with risk priorities, business needs, and platform evolution. You collaborate closely with product engineering, DevOps, platform, and compliance leaders to deeply understand the “why” behind the work, ensuring the controls you design directly support customer trust, regulatory commitments, and Spring’s ability to ship quickly without compromise.

You lead the design and rollout of secure development practices that span the organization, including threat modeling, secure code review, dependency management, and static and dynamic analysis. You own and evolve Spring’s Secure Development Lifecycle, embedding security reviews, tooling, and guardrails into CI/CD workflows so security becomes part of how engineers build, not a gate they navigate around. You bring architectural foresight to the most sensitive systems we operate, balancing competing constraints, identifying long-term risks, and making thoughtful trade-offs between speed, defense-in-depth, and developer experience. You have a track record of making security simpler, more reliable, and more maintainable over time, and of influencing others to do the same.

This is primarily an individual contributor role, but you may lead a small team of engineers or act as the technical owner for application security across the organization. You lead by example through strong technical execution, collaborative problem-solving, and a practical, risk-aware approach to security. You evaluate and implement security tools and services (e.g., SAST, DAST, SBOM, secrets scanning, WAF, CSPM) that improve detection and resilience, and you measure their impact rather than their presence.

You model and champion the use of AI tools in the application security process, using them to increase coverage, speed, and exploratory capacity across reviews, threat modeling, and detection engineering. You help others adopt AI responsibly, and you remain critical of its output, especially in security-sensitive contexts where confident wrong answers are dangerous. You set the bar for testing, automation, and operational excellence in everything appsec touches.

You are a strong partner to engineering leadership, product, compliance, and the executive team. You help leaders frame complex security trade-offs, clarify ambiguous risks, and align technical decisions with business strategy. You own or contribute to incident response for application-related exposures, lead post-incident learning, and translate findings into systemic improvements. You support Spring’s compliance posture, including SOC 2 readiness and audit participation, and you track and communicate Spring’s application security posture through clear metrics, risk registers, and executive-level reporting. You mentor application security engineers and elevate the practice across Spring.

What You’ll Do

Shape and drive Spring’s application security strategy and roadmap, aligning initiatives with risk priorities, business priorities, and platform evolution.
Lead the definition and rollout of secure development practices across engineering: threat modeling, secure code review, dependency management, and static and dynamic analysis.
Define and manage Spring’s SDL, embedding security reviews, tooling, and guardrails into CI/CD workflows and moving them from advisory to enforced with clear exception handling.
Partner with engineering, DevOps, and platform teams to identify and remediate security risks across applications, services, APIs, and cloud environments.
Evaluate, select, and implement security tools and services (e.g., SAST, DAST, SBOM, secrets scanning, WAF, CSPM) that meaningfully improve detection and resilience.
Champion the responsible use of AI in application security workflows, and identify opportunities to integrate AI into Spring’s security tooling and detection capabilities.
Set the security bar for AI-powered features and internal AI tooling, including risks such as prompt injection, data leakage, and excessive agent permissions.
Own or contribute to incident response for application-related vulnerabilities and exposures, leading post-incident learning and turning findings into systemic improvements.
Support Spring’s compliance posture, including SOC 2 readiness, audit participation, and evidence gathering for application-level controls and privacy obligations (e.g., PIPEDA).
Act as a subject matter expert for product and engineering teams on secure architecture, data protection, and third-party risk.
Mentor and grow the appsec team, supporting both technical depth and cross-functional influence; may lead a small team of engineers.
Track and communicate security posture through clear metrics, risk registers, and executive-level reporting.

Requirements

What we're looking for:

5+ years of experience in application security, software engineering, or security engineering, including at least 2 years leading security initiatives or acting as a technical owner.".
Deep knowledge of web and cloud application security principles, the OWASP Top 10, and secure coding best practices.
Proven experience implementing SDL processes and integrating security into CI/CD pipelines and agile environments.
Define how vulnerabilities are prioritized, tracked, and closed across Spring, including remediation targets, exceptions, and risk acceptance.
Fluency in threat modeling frameworks (e.g., STRIDE, PASTA) and secure architecture reviews for business-critical systems.
Strong familiarity with cloud-native architecture (e.g., AWS, microservices, containerization, API gateways).
Deep hands-on experience operating automated security testing at scale, including tuning, noise reduction, and measuring effectiveness. (e.g., Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, or similar).
Solid understanding of common identity, access, and secrets management patterns (e.g., OAuth/OIDC, SSO, token handling, cloud IAM and least privilege).
Track record of leading cross-functional security initiatives and influencing engineering and business stakeholders without authority.
Strong grasp of AI tools relevant to application security and their appropriate, responsible use, and of the security risks AI introduces into applications.
Experience supporting compliance initiatives such as SOC 2, PCI DSS, privacy regulations (e.g., PIPEDA) or ISO 27001 is a plus.

Nice to have

A relevant security certification (e.g. OSCP, OSWE, BSCP, or AWS Security Specialty)
AI security training or certification (e.g., AWS Certified AI Practitioner, Hack The Box AI Red Teamer path, OSAI)
Regular hands-on practice (e.g., PortSwigger Web Security Academy, Hack The Box)
Bug bounty findings or security research or open-source security contributions.
Experience building or scaling a security program at a growth-stage company

What We Will Give You

Competitive annual salary ranging from $130,000 to $150,000, reflective of experience and impact.
Comprehensive benefits package, including extended health, dental, and vision coverage - with 100% of monthly premiums covered by the Spring.
GRSP matching program to support your long-term financial goals.
A modern, collaborative workspace in the heart of downtown Vancouver.
Ongoing career growth opportunities

Please note: Upon applying, our Talent Acquisition team will review your resume. If you qualify, we will reach out to learn more about your experience and answer any questions you may have about the role, benefits, compensation, and more. Due to high application volume, we may not be able to respond to everyone.

Thank you for your interest! We appreciate your time and look forward to reviewing your application!

Apply on LinkedIn About employer

More about this job

Responsibilities

Own and advance the application security strategy and secure development lifecycle, embedding threat modeling, code review, automated testing, and security guardrails into engineering workflows. Partner with engineering, product, compliance, and leadership teams to manage risks, respond to incidents, support audits, improve security tooling, and report on security posture.

Requirements

Requires at least five years of application security, software engineering, or security engineering experience, including two years leading security initiatives or serving as a technical owner. Candidates should have strong expertise in web and cloud security, threat modeling, secure development practices, CI/CD security testing, cloud-native architecture, identity and secrets management, and responsible AI security.

Skills

Application Security
Secure Development Lifecycle
Threat Modeling
Secure Code Review
CI/CD Security
Cloud Security
Web Application Security
Automated Security Testing
Vulnerability Management
Secure Architecture
Identity and Access Management
Incident Response
AI Security
Compliance
Cross-Functional Leadership
Security Metrics and Reporting

Benefits

Extended Health Coverage
Dental Coverage
Vision Coverage
GRSP Matching
Career Growth Opportunities

Visa sponsorship

Not detected in the job text

Keywords

Application Security
Secure Development Lifecycle
Threat Modeling
STRIDE
PASTA
OWASP Top 10
Secure Code Review
CI/CD
SAST
DAST
SBOM
Secrets Scanning
WAF
CSPM
Snyk
GitHub Advanced Security
Burp Suite
Semgrep
Checkov
AWS
Microservices
Containerization
API Gateways
OAuth
OIDC
Cloud IAM
SOC 2
PCI DSS
PIPEDA
ISO 27001

Report this job

Work requirements

Jobs in Canada