Global Relay

Principal Application Security Specialist

Vancouver, British Columbia, Canada · Principal

Sponsorship not specified$125k-$160kDetected 5 days ago

PythonJavaBashPowerShellGitDockerKubernetesCI/CDJenkinsDevOpsLLMsCybersecurityPenetration TestingAgileResearchLeadershipCommunicationMentoring

About the role

The Principal Application Security Specialist is the most senior individual contributor across Global Relay's Software & Application Security function.
Combining deep application security testing mastery with DevSecOps leadership, you set the technical direction for how Global Relay tests the security of its applications and for how security is engineered into the software development lifecycle.
Serve as the organization's authority and final technical escalation point for application security.

Responsibilities

Collaborate with the Team Lead, Application & Software Security to develop and own the application security testing methodology and standards across web, API, mobile and AI/LLM domains.
Lead the most complex, novel and high-risk security assessments, including original research and the development of new testing techniques and tooling.
Own the organization-wide triage, escalation and evidence-quality framework across all security testing and scanning functions and define how L1-L3 teams are trained and measured against it.
Support the direction for the penetration testing and offensive security program.
Own the most advanced threat modelling for critical and cross-cutting architecture.
Drive the integration of security into the SDLC and CI/CD pipelines, championing a proactive, risk-based, "shift-left" approach.
Develop the organization-wide standards for remediation verification, retest evidence and release closure, ensuring security gating is consistently and appropriately applied across all release pipelines.
Design and deploy an automated security framework for robust tooling and processes, using scripting and open-source solutions.
Collaborate with Engineering for the selection, deployment and management of security scanning tools (SAST, DAST, SCA, container) within CI/CD pipelines, integrating them via APIs and plugins using agile delivery methods.
Review and analyze vulnerability data to identify risk across applications, infrastructure and network, and manage false positives.

Requirements

8+ years experience across application/product security testing and DevSecOps, with expert knowledge of software security.
Experience with security frameworks (OWASP, MITRE, NIST), testing tools (SAST/DAST/SCA), scripting (Python, Java, Bash, PowerShell), and DevOps/CI-CD tooling (Git, Jenkins, Docker/Kubernetes)

Compensation

Global Relay advertises the pay range for this role in compliance with British Columbia's pay transparency laws.
Individual pay rates are determined by evaluating factors such as expertise, skills, education, and professional background.
The range below reflects the expected annual base salary, which is only one element of our comprehensive total rewards package designed to reflect our company pay philosophy, culture and values.
Employees also receive annual allotted vacation days, which increase based on tenure.
British Columbia - Base salary range
$125,000 - $160,000 CAD

Benefits

Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion.
Define how testing coverage, quality and effectiveness are measured and drive continuous improvement.
We provide a comprehensive extended health benefits program, including virtual healthcare and a wellness allowance.
Paid sick days, maternity/parental enhancement program, bonus, and an RRSP contribution matching program.

Company info

For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world's most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.
Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It's a place where you can genuinely make an impact - and be recognized for it.
We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers.
Your role:
For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions.
We securely capture and preserve the communications data of the world's most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.
Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company.
Global Relay is a career-building company.
A place for big ideas.
New challenges.
Groundbreaking innovation.
It's a place where you can genuinely make an impact - and be recognized for it.
We believe great businesses thrive on diversity, inclusion, and the contributions of all employees.
To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers.

Apply directly at Global Relay →Create a free account for alerts like this View Global Relay immigration profile

This listing is sourced directly from Global Relay's careers page and normalized into a canonical job model.