[All remote jobs](https://jobicy.com/jobs.md)[![D2L logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/0ac958a8-221.jpg)](https://jobicy.com/company/d2l.md)[D2L](https://jobicy.com/company/d2l.md) # Senior Application Security Analyst AI Summary D2L is seeking a Senior Application Security Analyst to strengthen and deliver its application security program across endpoints, applications, and supporting infrastructure. The role performs security scanning, vulnerability assessment, third-party assessment triage, risk tracking, and audit support. It partners with engineering and operational teams to remediate findings and communicate security controls clearly to technical and nontechnical stakeholders. Candidates need practical code-review skills, cloud-security experience, familiarity with SAST, DAST, SCA, and knowledge of frameworks such as ISO 27001, NIST 800-53, PCI-DSS, and PBMM. This is a Canada-based remote full-time role with an annual base salary range of CAD 110,000 to CAD 150,000.[Apply for this job](#job-application)[View company](https://jobicy.com/company/d2l.md)ShareRemote from[Canada](https://jobicy.com/job-region/canada.md)SalaryCAD 110k–150k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished8 Nov 2026Apply before8 Dec 2026Listing views44Application actions2Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. [D2L](https://jobicy.com/company/d2l.md) is a cloud company that is modernizing education and building the Future of Work. The old models of teaching and learning are in the midst of the largest transformation in history, and D2L is at the heart of that fundamental shift. New models of teaching and learning enable a personalized, student-centric experience – and deliver improved retention, engagement, satisfaction, and results for learners of all ages – in schools, campuses, and companies. D2L is disrupting the way the world learns, by providing the next generation learning environment and solutions to engage and inspire learners. And most importantly, by giving customers a platform that is easy, flexible, and smart. No other company provides a solution as robust and innovative as D2L. D2L has had a singular mission for 25 years and is dedicated to that same mission in the years ahead: to transform the way the world learns – and by doing so, we will help improve human potential globally. Every application we receive is personally reviewed by a member of our Talent Acquisition team – yes, a real person looks at your resume! While we use AI tools internally to streamline tasks like meeting notes, summaries, and administrative work, these tools never rank resumes, make hiring decisions, or influence candidate evaluations. As Senior Application Security Analyst at D2L, you are a key influencer and contributor to the refinement and delivery of D2L’s Application Security Program. How will I make an Impact? * Assist in refining and delivering D2L’s Application Security Program with particular focus on endpoints, applications, and the underlying infrastructure. * Collaborate with operational teams on existing and emerging security risks and provide subject matter expertise. * Perform regular security scans and coordinate with stakeholders to address open issues * Triage third-party assessments and follow up with stakeholders to address issues * Monitor/track security risks and related artifacts throughout their lifecycle * Support internal D2L teams during security assessments/reviews/audits * Review independent third-party reports from vendors, suppliers and partners for alignment with D2L’s Application Security Program What you’ll bring to the role: Competencies: * Ability to engage process owners and explain security controls associated with processes * Ability to break down complex technical concepts to simple terms for various levels of stakeholders * Ability to work independently * Ability to learn fast and synthesize information from different domains and sources. * Ability to work well with a wide cross-section of engineering and operational teams Suggested Qualifications/Experience: * You have practical programming experience and are proficient at reviewing code in a variety of languages * You have previous hands-on experience implementing information security controls across a wide range of domains including Endpoint Security, Application Security, and Infrastructure Security. (SAST, DAST, SCA) * You have hands-on experience with public cloud services like AWS or Azure etc. * You have hands-on experience performing vulnerability assessments and penetration tests. * Having both Red Team and Blue Team experience is a strong plus. * You have demonstrable experience working with teams that have implemented security controls based on ISO 27001/NIST 800-53, PCI-DSS, PBMM * You have experience using enterprise-grade governance risk and compliance (GRC) tools. * You have experience assessing security control implementations on large enterprises, web scale and serverless environments. * You have experience engaging stakeholders in remediating security-related findings * You have experience supporting an audit exercise by generating security-related evidence This position is to fill an existing vacancy The expected base salary range for a new hire in this role is listed below. The annualized base salary offered is determined by each candidate’s relevant knowledge, skills, education, training and experience. It is aligned to ensure both internal and external competitiveness using market data for the geographic location and industry. As part of the total compensation at D2L the role may be eligible for additional benefits including a Wellness Subsidy, Equity Grants, Variable Incentive, and more. Base Salary Range $110,000—$150,000 CAD Don’t meet every single requirement? We strongly encourage you to still apply! At D2L, we are committed to creating a diverse and inclusive environment. We encourage your application even if you don’t believe you meet every single qualification outlined, because we love to help our people grow and develop! Why we’re awesome: At D2L, we are dedicated to providing you with the tools to do the best work of your life. While some of our perks and benefits may vary depending on location or employment type, we are proud to provide employees with the following through [#LifeAtD2L](https://www.d2l.com/careers/blog/): * Impactful work transforming the way the world learns * Flexible work arrangements * Learning and Growth opportunities * Tuition reimbursement of up to $4,000 CAD for continuing education through our SkillsWave Program * 2 Paid Days off for SkillsWave-related activities like exams or final assignments * Employee wellbeing (Access to mental health services, EFAP program, financial planning and more) * Retirement planning * 2 Paid Volunteer Days * Competitive Benefits Package * Home Internet Reimbursements * Employee Referral Program * Wellness Reimbursement * Employee Recognition * Social Events * Dog Friendly Offices Spaces at our HQ in Kitchener, Winnipeg, Vancouver and Melbourne offices. Show more [Apply now >](https://jobicy.com/jobs/159850-senior-application-security-analyst.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 4/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 4/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThe position requires broad hands-on application, cloud, infrastructure, and governance security expertise, plus the ability to review code and assess complex enterprise environments. It also demands independent risk prioritization and effective stakeholder influence during remediation and audits. ## Salary analysis Estimated compensation compared with the broader CA market for similar roles. Estimated job median (per year)Market rateC$130,000CA market range (per year)C$115k–C$165k0C$181.50k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer explicitly states an annualized base salary range of CAD 110,000–150,000, with a midpoint of CAD 130,000 per year. A reasonable estimated Canadian market range for a senior application security analyst is CAD 115,000–165,000 annually; estimates are not verified salary research and exclude equity, incentives, and benefits. ## Core skills Skills and capabilities most closely associated with this opportunity. [Application Security](https://jobicy.com/jobs?search_keywords=Application%20Security.md)[Secure Code Review](https://jobicy.com/jobs?search_keywords=Secure%20Code%20Review.md)[SAST](https://jobicy.com/jobs?search_keywords=SAST.md)[DAST](https://jobicy.com/jobs?search_keywords=DAST.md)[Software Composition Analysis](https://jobicy.com/jobs?search_keywords=Software%20Composition%20Analysis.md)[Vulnerability Assessment](https://jobicy.com/jobs?search_keywords=Vulnerability%20Assessment.md)[Penetration Testing](https://jobicy.com/jobs?search_keywords=Penetration%20Testing.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[AWS](https://jobicy.com/jobs?search_keywords=AWS.md)[Azure](https://jobicy.com/jobs?search_keywords=Azure.md)[ISO 27001](https://jobicy.com/jobs?search_keywords=ISO%2027001.md)[NIST 800-53](https://jobicy.com/jobs?search_keywords=NIST%20800-53.md)[PCI-DSS](https://jobicy.com/jobs?search_keywords=PCI-DSS.md)[GRC](https://jobicy.com/jobs?search_keywords=GRC.md)[Risk Remediation](https://jobicy.com/jobs?search_keywords=Risk%20Remediation.md) Sample interview questionsHow would you prioritize application-security findings discovered through SAST, DAST, and penetration testing?I would normalize findings, remove duplicates and false positives, then prioritize according to exploitability, business impact, asset exposure, data sensitivity, and existing compensating controls. I would agree remediation timelines with service owners, document risk acceptance where justified, and track closure evidence through the GRC or ticketing system. Describe your approach to reviewing code for security issues across multiple programming languages. I begin by understanding the application's architecture, trust boundaries, authentication model, and data flows. I then focus on common risk areas such as injection, authorization failures, insecure deserialization, secrets exposure, input validation, and unsafe dependency use, while combining manual review with automated scanner results. How have you helped engineering teams remediate a critical cloud-security finding? I would first validate the finding and identify affected resources, identities, data, and exposure paths. I would provide a concise remediation plan with code or configuration examples, work with the owning team on an immediate containment action, and then verify the permanent fix through retesting and documented evidence. What evidence would you prepare to support an audit against ISO 27001 or NIST 800-53 controls? I would map the relevant controls to system owners and collect current, traceable evidence such as policies, architecture diagrams, scan reports, access reviews, change records, incident records, remediation tickets, and control-test results. I would confirm the evidence demonstrates both the control design and its ongoing operation. How do you communicate a complex security risk to a nontechnical stakeholder? I explain the risk in terms of the affected business process, likely impact, probability, and available decision options rather than relying on technical jargon. I summarize the recommended action, owner, timeline, residual risk, and any consequences of delaying remediation. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Databricks logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/4e3f864ba9cf3c62d471e1c62414d098.jpg) Databricks Nov 8 New ### [Staff Enterprise Security Engineer](https://jobicy.com/jobs/159859-staff-enterprise-security-engineer.md) RDQ227R1176 While candidates in the listed location(s) are encouraged for this role, candidates in other locations (US based) will be considered. Mission Databricks is hiring an L6 Staff Enterprise Security… * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Nov 8 New ### [Senior IT Engineer, Identity and Access Management](https://jobicy.com/jobs/159753-senior-it-engineer-identity-and-access-management.md) 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![Goodleap logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/482c4fb7-221.png) Goodleap Nov 8 New ### [Staff Security Engineer, Security Operations](https://jobicy.com/jobs/159659-staff-security-engineer-security-operations.md) About GoodLeap: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more…. * ![Discord logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/02/WRILS-210216185819-522054.jpg) Discord Nov 8 New ### [Engineering Manager, Platform Security](https://jobicy.com/jobs/154856-engineering-manager-platform-security.md) Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video… * ![HackerOne logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8937d355-221.png) HackerOne Nov 8 New ### [Senior Security Engineer, Identity and Access Management](https://jobicy.com/jobs/154842-senior-security-engineer-identity-and-access-management.md) HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to… * ![Elevenlabs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e01b4c5d-221.png) Elevenlabs Nov 8 New ### [Safety Engineer – Free Tier Abuse](https://jobicy.com/jobs/154823-safety-engineer-free-tier-abuse.md) About ElevenLabs ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Nov 8 New ### [Senior / Staff Threat Intelligence Analyst, Hacks](https://jobicy.com/jobs/154835-senior-staff-threat-intelligence-analyst-hacks.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Tenable logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01879e02-221.jpg) Tenable Nov 8 New ### [Principal Solutions Architect (AWS Technical Alliances)](https://jobicy.com/jobs/152664-principal-solutions-architect-aws-technical-alliances.md) Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent… * ![Upside logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/06e64944-221.png) Upside Nov 8 New ### [Staff Application Security Engineer](https://jobicy.com/jobs/152657-staff-application-security-engineer.md) Meet Upside: We created Upside to transform brick-and-mortar commerce. Our technology uses the sophistication of online retail—profit measurement, attribution, and incrementality—to provide users with more value on their everyday purchases… * ![Databricks logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/4e3f864ba9cf3c62d471e1c62414d098.jpg) Databricks Nov 7 New ### [Sr. Staff Security Software Engineer – Agentic Security Engineering](https://jobicy.com/jobs/159516-sr-staff-security-software-engineer-agentic-security-engineering.md) RDQ327R179 While candidates in the listed location(s) are encouraged for this role, candidates in other (US) locations will be considered. About the Team The Agentic Security Engineering team is a… [Browse all jobs](https://jobicy.com/jobs.md)