Senior Application Security Analyst

Secure SDLC & DevSecOps

Vulnerability & Risk Management

Advisory & Stakeholder Engagement

Continuous Improvement

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• 5+ years of progressive experience in application security, secure software development, or product security
• Strong understanding of web and API technologies (HTTP/S, REST, JSON, OAuth, OpenID Connect, SAML)
• Hands‑on experience with application security testing tools (SAST, SCA, DAST, secret scanning)
• Solid knowledge of OWASP Top 10, threat modeling methodologies, and secure coding principles
• Strong analytical, problem‑solving, and communication skills, with the ability to explain security risks to both technical and non‑technical audiences
• Exceptional interpersonal skills and proven to flourish working in a fast-paced environment.
• Ability to work effectively in a cross-disciplinary team, across multiple projects and multiple locations.

Additional skills that set you apart

• Experience securing cloud‑native applications in AWS and/or Azure environments
• Familiarity with API gateways, WAFs, and runtime protection controls
• Experience working in agile or DevOps delivery environments
• Relevant security certifications (e.g., CSSLP, GWAPT, GWEB, CISSP, OSCP)
• Strong knowledge of one or more modern programming languages (e.g. Python, Java, C++, JavaScript)
• The work we do at Purolator impacts every Canadian. To work with us, you must be eligible to obtain a Reliability Security Clearance.

Language Requirement

• Proficiency in English is required for this position due to the frequent communications that must be conducted in English with various stakeholders. This requirement is justified by the nature of the responsibilities and operational needs.

POSTING DETAILS Location

• 530 - Corporate Working Conditions: Office Environment
• Reports to: Technology Manager Information Security Office ---
• Purolator is an equal opportunity employer committed to diversity and inclusion . We welcome all qualified applicants and provide accommodations during the recruitment process upon request.
• Purolator complies with Canadian law in all recruitment practices. During pre-screening, we may use an Artificial Intelligence (AI) tool, supported by human oversight, to efficiently manage tasks such as resume screening and candidate matching, enabling our team to connect with qualified candidates faster.
• Personal information is used solely for recruitment and managed in accordance with privacy legislation. For AI-related inquiries only, contact TalentCOE@purolator.com . To apply, visit our Careers Page.
• We recognize that employees and their families are essential to our success. We strive to provide a safe, healthy, and supportive workplace, ensuring the right people have the tools they need to thrive.
• Every day at Purolator is an opportunity to connect with colleagues, customers, and communities to make a positive impact. Learn more about our values at www.purolator.com .
• Job Segment: Cloud, Testing, Risk Management, Computer Science, Information Security, Technology, Finance