Find work in Canada.

625,161 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 3 months ago
J
Forward Deployed Engineer, Supply Chain
Jetson
Kitchener, ON
- Full-time
A builder who ships. Strong engineering fundamentals, good judgment, and a drive to get things into people's hands. You're fluent in TypeScript, Python, or other high-level language,…
Added 3 months ago
J
Forward Deployed Engineer, Finance
Jetson
North Vancouver, BC
- Full-time
A builder who ships. Strong engineering fundamentals, good judgment, and a drive to get things into people's hands. You're fluent in TypeScript, Python, or other high-level language,…
Added 3 months ago
J
Forward Deployed Engineer, Supply Chain
Jetson
North Vancouver, BC
- Full-time
A builder who ships. Strong engineering fundamentals, good judgment, and a drive to get things into people's hands. You're fluent in TypeScript, Python, or other high-level language,…
Added 2 months ago
TT
AI/ML Engineer
TC Transcontinental
Mississauga, ON
- Full-time
We are looking for an AI/ML Engineer to work on building a multi-tenant, AI-driven promotional content platform for our customers.
Added 1 month ago
Lead Developer, Tools
2K
Montreal, QC
A Lead Developer focused on pipeline products and data systems. You are a multi-functional engineer who loves building software across all tech stacks. You might develop a data warehouse…
Added 2 months ago
R
Senior Machine Learning Engineer
Remitly
Burnaby, BC
- Full-time
As a Senior Machine Learning Engineer in Remitly's Core AI/ML team, you'll work at the heart of our AI strategy. The Core AI/ML team is responsible for building the foundational machine…
Added 2 months ago
Senior Application Security Engineer
TripleLift
Toronto, ON
The Senior Application Security Engineer plays a critical role in driving secure software development and application security maturity within TripleLift's Engineering and Security…
Added 2 months ago
Physical Design Engineer, AI Accelerator IP
Tenstorrent
Toronto, ON
A hands-on physical design engineer who owns blocks end to end, with a track record of block-level and IP tapeouts on advanced nodes.
Added 2 months ago
Backend Software Product Developer, Ops Planning
HelloFresh
Toronto, ON
We are looking for a midlevel engineer to help implement solutions & write beautiful code, working with various team members as we build out our operation planning infrastructure that…
Added 3 months ago
L
Principal AI/ML Engineer
lululemon
Vancouver, BC
- Full-time
As a Principal AI/ML Engineer, you will define and drive implementation approaches for enterprise-scale AI initiatives that transform how lululemon operates and delivers value. You will…
Added 3 months ago
D
Staff Software Engineer
Dialpad
Vancouver, BC
- Full-time
…work every day. We put powerful AI tools in every employee’s hands so they can move faster, think bigger, and achieve…
Added 4 months ago
A
Intermediate Full Stack Software Engineer
AltaML
Edmonton, AB
- $90,000 to $110,000 CAD / year
- Full-time
We are looking for a Full Stack Software Engineer who builds software in an AI-native way - someone who treats Claude and the latest agentic coding tools as a core part of their craft, not…
Added 3 months ago
A
Senior Platform Engineer
AutoTrader.ca
Toronto, ON
- Full-time
…What we care about is a faster, smoother day-to-day for every engineer, and AI is the biggest lever we…
Added 2 months ago
PA
AI Infrastructure Engineer
Palona AI
Toronto, ON
- Full-time
We are looking for an Infrastructure Engineer who combines cloud and reliability depth with strong software engineering judgment. You will build and operate the platform beneath Palona’s AI…
Added 2 months ago
PA
AI Modeling Engineer
Palona AI
Toronto, ON
- Full-time
We are looking for an applied AI Modeling Engineer to improve the intelligence, accuracy, safety, latency, and cost of Palona’s voice and multimodal agents. You will own problems across…
Added 3 months ago
Senior Full Stack API Engineer
Questrade Financial Group
Toronto, ON
We’re looking for our next Senior Fullstack API Engineer. Could It Be You?
Added 3 months ago
L
Sr. Staff Physical Design Engineer
Lightmatter
Toronto, ON
- Full-time
We are seeking a highly skilled Senior Physical Design Engineer to work on the implementation of complex digital blocks. In this role, you will leverage your expertise in advanced process…
Added 3 months ago
EA
Machine Learning Engineer
exacare ai
Canada
- Full-time
We are seeking a highly adaptable, creative, and well-rounded Machine Learning Engineer to join our team. You will own the end-to-end ML lifecycle, from dataset creation and foundational…
Added 2 months ago
Ingénieur DevOps / DevOps Engineer
mthree
Montreal, QC
Added 1 month ago
Staff Security Engineer
Forma.ai
Toronto, ON
As a Staff Security Engineer, you will be a hands-on technical leader strengthening security across Forma's application, cloud infrastructure, development lifecycle, internal systems, and…
Added 2 months ago
W
Senior AI Engineer - Evisort AI
Workday
Vancouver, BC · Toronto, ON · Canada, BC, Vancouver
- Full-time
As a Senior AI Engineer, your primary focus will be building AI features and intelligent agents specifically for the Contract Lifecycle Management (CLM) domain, though you will also be…
Added 3 months ago
TA
Forward Deployed Engineer (Generative AI)
Tiger Analytics
Canada
- Full-time
Tiger Analytics is looking for experienced Forward Deployment Engineer (Generative AI) with Gen AI experience to join our fast-growing advanced analytics consulting firm. Our employees…
Added 3 months ago
TA
Gen AI Engineer
Tiger Analytics
Canada
- Full-time
…Everest, ISG, and others.We are looking for a highly skilled AI Engineer with 7+ years of experience in software engineering, with a heavy focus on Python, AWS infrastructure, and…
Added 3 months ago
H(
Sr. Cloud Platform Engineer
HOOPP (Healthcare of Ontario Pension Plan)
Toronto, ON · CA ON Toronto
- $103,000 to $153,000 CAD / year
- Full-time
Hands-on experience developing and maintaining automation solutions using Bash, PowerShell, and Python to automate cloud platform administration, standardize infrastructure operations, and…
Added 3 months ago
H(
Sr. Cloud Platform Engineer (Network and Cloud Operations)
HOOPP (Healthcare of Ontario Pension Plan)
Toronto, ON · CA ON Toronto
- $103,000 to $153,000 CAD / year
- Full-time
Reporting to the Sr. Manager, Cloud Platform, the Sr. Cloud Platform Engineer will be responsible for designing, maintaining and supporting cloud infrastructure and operations for HOOPP’s…

TripleLift

Senior Application Security Engineer

Toronto, ON, Canada

Apply About employer

Applications open in a new tab.

Job details

Experience: 5 years minimum of experience in application security, secure software development, security engineering, or a similar role.
Posting language: English
Posted: Aug 27, 2026

Original job description

About TripleLift

We're TripleLift, an advertising platform on a mission to elevate digital advertising through beautiful creative, quality publishers, actionable data and smart targeting. Through over 1 trillion monthly ad transactions, we help publishers and platforms monetize their businesses. Our technology is where the world's leading brands find audiences across online video, connected television, display and native ads. Brand and enterprise customers choose us because of our innovative solutions, premium formats, and supportive experts dedicated to maximizing their performance.

As part of the Vista Equity Partners portfolio, we are NMSDC certified, qualify for diverse spending goals and are committed to economic inclusion. Find out how TripleLift raises up the programmatic ecosystem at triplelift.com.

Overview

The Senior Application Security Engineer plays a critical role in driving secure software development and application security maturity within TripleLift's Engineering and Security organization, directly influencing how we protect our advertising platforms and the trust our publishers and advertisers place in us. In this position, you will partner closely with Engineering, Platform, Cloud Infrastructure, and Security teams to shape secure coding practices, application security tooling, vulnerability remediation, and CI/CD security, ensuring security is embedded into how we design, build, deploy, and operate our products.This is an exciting opportunity for someone who wants to build and scale an application security program at a company operating at the center of a rapidly evolving, high-stakes ad-tech landscape, while contributing meaningfully to the long-term security posture and resilience of the organization.

Responsibilities

Play a critical role in building and maintaining a global security compliance program based on NIST CSF.
Scale application security by developing automated security testing utilizing enterprise SAST, DAST, and code-review tools.
Champion SDLC to promote secure application development and infrastructure deployment and facilitate secure coding remediation activities.
Automate security testing in CI/CD pipelines to detect vulnerabilities early, including building and maintaining the pipeline integrations themselves.
Administer and drive adoption of GitHub Advanced Security (GHAS) : code scanning, secret scanning, and dependency review across engineering repositories.
Participate in threat modeling and design/architecture spec reviews to identify and mitigate security risks early in the SDLC.
Coordinate with stakeholders to develop and implement a vulnerability management program and to perform threat-hunting activities.
Own and conduct internal penetration testing and vulnerability assessments of applications and infrastructure, and validate findings from third-party pentest engagements.
Monitor and respond to application-layer security threats like API abuses, business logic flaws, and common web vulnerabilities.
Collaborate with product and engineering teams to ensure security is a key consideration in software design and architecture.
Enhance application security posture by working with cross-functional teams to implement proper authentication, authorization, and data protection mechanisms.
Enhance and facilitate security incident handling activities.
Evangelize security best practices and provide education and awareness to company employees. Develop and implement secure coding guidelines and conduct secure development training for engineers.
Evaluate and continuously improve the maturity of the security program through the deployment and management of various security tools and processes.

Education & Requirements

5 years minimum of experience in application security, secure software development, security engineering, or a similar role.
Strong understanding of secure coding practices and ability to guide developers on remediation strategies.
Experience with GitHub Advanced Security (GHAS), including Code Scanning (SAST), Secret Scanning, and Dependency Review.
Proficiency in SAST, DAST, and SCA tools (e.g., CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode).
Hands-on experience integrating security testing tools into CI/CD pipelines for automated security scanning, including designing and building pipeline workflows.
Hands-on penetration testing / offensive security experience across web applications, APIs, or cloud infrastructure.
Knowledge of common application security vulnerabilities and mitigations (OWASP Top 10, CWE, business logic flaws, API security).
Ability to perform threat modeling and participate in design/architecture spec reviews to assess security risks in applications and services.
Experience conducting security code reviews across various programming languages (e.g., Python, Java, TypeScript, Go).
Understanding of security fundamentals with relation to various cybersecurity and compliance frameworks, particularly NIST CSF, but any of PCI, SOC2, HITRUST, ISO 27001/2, or similar.
Strong understanding of AWS security services and controls (IAM, VPC, KMS, GuardDuty, CloudTrail) and experience securing cloud-native environments and workloads, with the ability to deploy security tools within them.
Takes ownership of projects, works independently with minimal oversight, and delivers results in a fast-paced environment while balancing multiple priorities.
Continuously learns, adapts, and values correctness, efficiency, and constructive feedback.

Preferred:

Experience in the ad-tech / programmatic advertising industry, or another high-scale, real-time environment.
Preferred: Familiarity with using AI/LLM-based tools (e.g., Claude or similar) for threat intelligence, alert triage, or security automation.
Holds a cybersecurity certification, e.g., OSCP, GWAPT, CISSP, CISA, etc.

Life at TripleLift

At TripleLift, we’re a team of great people who like who they work with and want to make everyone around them better. This means being positive, collaborative, and compassionate. We hustle harder than the competition and are continuously innovating.

Learn more about TripleLift and our culture by visiting our LinkedIn Life page.

Establishing People, Culture and Community Initiatives

At TripleLift, we are committed to building a culture where people feel connected, supported, and empowered to do their best work. We invest in our people and foster a workplace that encourages curiosity, celebrates shared values, and promotes meaningful connections across teams and communities. We want to ensure the best talent of every background, viewpoint, and experience has an opportunity to be hired, belong, and develop at TripleLift. Through our People, Culture, and Community initiatives, we aim to create an environment where everyone can thrive and feel a true sense of belonging.

Privacy Policy

Please see our Privacy Policies on our TripleLift and 1plusX websites.

TripleLift does not accept unsolicited resumes from any type of recruitment search firm. Any resume submitted in the absence of a signed agreement will become the property of TripleLift and no fee shall be due.

Apply About employer

More about this job

Responsibilities

The Senior Application Security Engineer will drive secure software development and application security maturity across the organization. They will partner with engineering and security teams to implement automated security testing, vulnerability management, and secure coding practices.

Requirements

Candidates must have at least 5 years of experience in application security or secure software development. Proficiency in security tools, CI/CD integration, and cloud security fundamentals is required.

Skills

Application Security
Secure Coding
SAST
DAST
CI/CD Pipelines
GitHub Advanced Security
Vulnerability Management
Penetration Testing
Threat Modeling
AWS Security
Python
Java
TypeScript
Go
NIST CSF
API Security

Visa sponsorship

Not detected in the job text

Keywords

Application Security
NIST CSF
SAST
DAST
SCA
GitHub Advanced Security
CI/CD
Penetration Testing
Threat Modeling
AWS
Python
Java
TypeScript
Go
OWASP Top 10
API Security
Vulnerability Management
Cloud Security
Ad-tech
Programmatic Advertising
Compliance
CodeQL
Burp Suite
Snyk
Checkmarx
Veracode
IAM
VPC
KMS
GuardDuty

Report this job