Application Security Engineer II

Role overview This Application Security Engineer II role centers on embedding security into the architecture of a fast-scaling consumer marketplace that increasingly uses AI-powered features. The position partners with product, engineering, platform, and data teams to make the secure path the default, enabling rapid shipping without sacrificing customer trust.

Responsibilities - Deliver scoped application security work within defined projects or domains and contribute pieces of broader cross-functional security initiatives - Identify, prioritize, and help remediate application security risks in partnership with engineering teams - Apply secure-by-default patterns and approved architectures when designing or reviewing systems - Lead application security design reviews and threat modeling for new and existing services - Write code, review pull requests, and produce documentation that fix vulnerabilities and reduce recurring classes of issues - Participate in security incident response and contribute to post-incident analysis and remediation

Requirements - 4+ years of experience in software engineering, application security, or a closely related blend - Practical experience with threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation - Strong understanding of secure coding practices and common risks such as the OWASP Top 10 - Ability to assess security risk, reason about tradeoffs, and recommend practical solutions, working with light guidance when needed - Clear written and verbal communication skills, including the ability to explain security issues to engineers with varied security expertise - A growth mindset with interest in learning from senior engineers and expanding depth in application and cloud infrastructure security

Benefits and work setup Expected total cash compensation for candidates located in Ontario and British Columbia ranges from $118,200 to $152,900, with actual offers calibrated to experience, skill level, and proficiency for the role.