Senior Application Security Analyst

About D2L

D2L is a leading cloud-based company revolutionizing education and shaping the Future of Work. By transforming traditional teaching and learning methods, D2L offers a highly personalized and student-focused experience, enhancing retention, engagement, satisfaction, and outcomes for learners across educational institutions and corporations.

D2L delivers innovative, user-friendly learning platforms and solutions designed to inspire and engage learners worldwide. For 25 years, D2L has been committed to its mission of transforming global learning to unlock human potential.

Role Overview

As a Senior Application Security Analyst at D2L, you will play an integral role in enhancing and executing the company's Application Security Program, focusing on securing endpoints, applications, and their underlying infrastructure.

Key Responsibilities

• Contribute to refining and advancing D2L's Application Security Program emphasizing endpoint and application protection along with infrastructure security.
• Conduct routine security scans and liaise with relevant teams to resolve identified vulnerabilities.
• Collaborate with operational divisions to identify and manage current and emerging security threats, offering your expertise.
• Manage third-party security assessments by evaluating reports and ensuring follow-up actions with stakeholders.
• Monitor, track, and document security risks and related artifacts over their lifecycle.
• Support internal teams through security assessments, reviews, and audits.
• Assess third-party vendor and partner security reports for consistency with D2L’s application security standards.

Candidate Competencies

• Effectively communicate security control concepts to process owners and stakeholders across different levels.
• Simplify complex technical information for diverse audiences.
• Demonstrate strong independence and proactive learning abilities.
• Quickly absorb and integrate information from multiple domains.
• Experience using Artificial Intelligence tools.
• Collaborate effectively with cross-functional engineering and operations teams.

Qualifications & Experience

• Hands-on programming skills with the ability to review source code across multiple languages.
• Practical experience implementing security controls spanning Endpoint, Application, and Infrastructure Security areas, including SAST, DAST, and Software Composition Analysis (SCA).
• Familiarity with public cloud platforms such as AWS or Azure.
• Experience conducting vulnerability assessments and penetration testing.
• Knowledgeable in security frameworks and standards like ISO 27001, NIST 800-53, PCI-DSS, and PBMM.
• Proficient with enterprise-grade governance, risk, and compliance (GRC) tools.
• Experienced in evaluating security controls within large-scale, web-scale, and serverless environments.
• Skilled in engaging with stakeholders to remediate security findings.
• Capable of supporting audit activities by producing necessary security documentation and evidence.

Work Arrangement & Compensation

This full-time position requires onsite presence in Kitchener, Ontario, with an expectation of approximately three days per week in the office, supporting a hybrid work style.

The base salary range for this role is CAD 100,000 to CAD 130,000 annually, determined by relevant expertise and experience. Additional benefits may include Wellness Subsidy, Equity Grants, Variable Incentive programs, and more.

Inclusivity & Encouragement

D2L welcomes applications from candidates who may not meet every qualification outlined, emphasizing a diverse and inclusive workplace where growth and development are fostered.

Employee Benefits

• Meaningful work influencing global learning transformation.
• Flexible working options.
• Opportunities for continuous learning and career development.
• Tuition reimbursement up to CAD 4,000 through educational support programs.
• Two paid days off for skill-building activities such as exams and assignments.
• Comprehensive employee wellness services including mental health and financial planning.
• Retirement planning assistance.
• Two paid volunteer days.
• Competitive health and benefits plan.
• Home internet cost reimbursements.
• Employee referral rewards.
• Wellness event reimbursement.
• Recognition programs.
• Regular social activities.
• Dog-friendly office environments at headquarters and other locations.