Senior Application Security Analyst
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
Key Skills for This Role
Full Job Posting
How will I make an Impact?
Assist in refining and delivering D2L's Application Security Program with particular focus on endpoints, applications, and the underlying infrastructure.
Perform regular security scans and coordinate with stakeholders to address open issues
Collaborate with operational teams on existing and emerging security risks and provide subject matter expertise.
Triage third-party assessments and follow up with stakeholders to address issues
Monitor/track security risks and related artifacts throughout their lifecycle
Support internal D2L teams during security assessments/reviews/audits
Review independent third-party reports from vendors, suppliers and partners for alignment with D2L’s Application Security Program
Competencies
Ability to engage process owners and explain security controls associated with processes
Ability to break down complex technical concepts to simple terms for various levels of stakeholders
Ability to work independently
Ability to learn fast and synthesize information from different domains and sources.
Acumen with Artificial Intelligence tools
Ability to work well with a wide cross-section of engineering and operational teams
Suggested Qualifications/Experience
- You have practical programming experience and are proficient at reviewing code in a variety of languages
- You have previous hands-on experience implementing information security controls across a wide range of domains including Endpoint Security, Application Security, and Infrastructure Security. (SAST, DAST, SCA)
- You have hands-on experience with public cloud services like AWS or Azure etc.
- You have hands-on experience performing vulnerability assessments and penetration tests.
- You have demonstrable experience working with teams that have implemented security controls based on ISO 27001/NIST 800-53, PCI-DSS, PBMM
- You have experience using enterprise-grade governance risk and compliance (GRC) tools.
- You have experience assessing security control implementations on large enterprises, web scale and serverless environments.
- You have experience engaging stakeholders in remediating security-related findings
- You have experience supporting an audit exercise by generating security-related evidence
- This position is to fill an existing vacancy
- D2L operates in a hybrid work style, with expectation of 3 days per week in office.
- The expected base salary range for a new hire in this role is listed below. The annualized base salary offered is determined by each candidate’s relevant knowledge, skills, education, training and experience. It is aligned to ensure both internal and external competitiveness using market data for the geographic location and industry. As part of the total compensation at D2L the role may be eligible for additional benefits including a Wellness Subsidy, Equity Grants, Variable Incentive, and more.
Don’t meet every single requirement?
- We strongly encourage you to still apply! At D2L, we are committed to creating a diverse and inclusive environment. We encourage your application even if you don't believe you meet every single qualification outlined, because we love to help our people grow and develop!
Why we're awesome
At D2L, we are dedicated to providing you with the tools to do the best work of your life. While some of our perks and benefits may vary depending on location or employment type, we are proud to provide employees with the following through #LifeAtD2L :
Impactful work transforming the way the world learns
Flexible work arrangements
Learning and Growth opportunities
Tuition reimbursement of up to $4,000 CAD for continuing education through our SkillsWave Program
2 Paid Days off for SkillsWave-related activities like exams or final assignments
Employee wellbeing (Access to mental health services, EFAP program, financial planning and more)
Retirement planning
2 Paid Volunteer Days
Competitive Benefits Package
Home Internet Reimbursements
Employee Referral Program
Wellness Reimbursement
Employee Recognition
Social Events
Dog Friendly Offices Spaces at our HQ in Kitchener, Winnipeg, Vancouver and Melbourne offices.
About D2L
Canadian edtech company providing cloud learning management software for schools, universities, associations, and businesses.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at D2L
Public Relations & Communications Coordinator - Winter 2027 Co-op
Kitchener, CAN
Public Relations & Communications Coordinator - Winter 2027 Co-op
Kitchener, CAN
Knowledge Specialist - Winter 2027 Co-op
Kitchener, CAN
Web Experience Coordinator - Winter 2027 Co-op
Kitchener, CAN
Senior Product Manager - Createspace, Canada Based
Toronto, CAN
D2L is seeking a Senior Product Manager to lead Creator product features from alignment and requirements through delivery, post-release, and end of life. The role requires strong software product management expertise, st
Public Relations & Communications Coordinator - Winter 2027 Co-op
Kitchener, CAN
Public Relations & Communications Coordinator - Winter 2027 Co-op
Kitchener, CAN
People and Culture Administrative Coordinator
Winnipeg, CAN
Knowledge Specialist - Winter 2027 Co-op
Kitchener, CAN
Product Support Analyst - Winter 2027 Co-op
Kitchener, CAN
Web Experience Coordinator - Winter 2027 Co-op
Kitchener, CAN
Senior Product Manager - Createspace, Canada Based
Toronto, CAN
Web Experience Coordinator - Winter 2027 Co-op
Kitchener, CAN