Application Security Lead

Workleap

Application Security Lead at Workleap enhancing security in development pipelines. Responsible for the security integration in product development and collaboration across teams.

Posted 4/22/2026full-timeRemote • 🇨🇦 CanadaSenior💰 CA$150,000 - CA$180,000 per yearWebsite

Tech Stack

Tools & technologies

AzureFluxPython

About the role

Key responsibilities & impact

Integrate security into CI/CD pipelines
Contribute to writing code, building tools, and collaborating with development teams
Ensure security is integrated into tools, pipelines, and agent-based workflows
Design and implement automated, policy-based security review flows
Conduct threat analyses and assessments for new features and architectures
Improve the efficiency of vulnerability detection and response
Collaborate with the Infrastructure SecOps team on shared concerns

Requirements

What you’ll need

8+ years of experience in application security, DevSecOps, or security-focused software development
Strong software development background combined with security expertise
Excellent understanding of application security principles (OWASP Top 10, CWE Top 25)
Hands-on experience performing secure code reviews in C#
Experience automating security within CI/CD pipelines (GitHub Actions is a plus)
Good knowledge of Azure services, cloud security, and deployment models
Experience integrating SAST, DAST, SCA, and secret-detection tools
Proficiency in scripting (Python, Bash) for automation
Deep practical experience with AI-assisted development tools and workflows
Familiarity with authentication protocols (OIDC, SAML, OAuth)
Ability to clearly communicate security risks and trade-offs to diverse stakeholders

Benefits

Comp & perks

Healthy, inclusive work environment
Opportunities for professional growth
Trust and support among team members

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application securityDevSecOpssecure code reviewsC#CI/CD pipelinesGitHub ActionsSASTDASTSCAPython

Soft Skills

collaborationcommunicationproblem-solvingrisk assessment