Application Security Analyst

Doing business to business, person to person. Payworks is a leading workforce management solutions provider and multi-year winner of the Canada's Best Managed Companies program. We are proudly Canadian as well as committed to developing world-class products and providing a progressive workplace culture where Doing Right by People is our purpose.

With clients of all sizes and more than 600 employees, we currently have an exciting opportunity on our IT Security team for the right candidate.

Reporting to the Senior Manager, Information Security, the Application Security Analyst will be responsible for supporting and contributing to application security efforts within the organization. This role involves ensuring that applications are developed and maintained with robust security measures to protect against vulnerabilities and threats, as well as ensuring applications provided to customers contain industry leading security features and functions.

• Comprehensive employer paid benefits, including a Health Spending Account, for you and your family and excellent pension plan with employer contributions.
• Plenty of professional development opportunities.
• Community-minded culture – Receive two paid days per year to volunteer and lots of opportunity to "Pay it Forward".
• Time and flexibility to meet your needs – Hybrid work model with flexible work options, plus 3 weeks vacation to start, flex time and parental leave benefits.
• Cool perks – Annual Lifestyle Spending Account, fun office environment and events, and more!

• Embed security in development - Contribute to and support Payworks’ application security strategy. Assist in implementing software security practices, processes, and technologies within the development lifecycle. Collaborate with QA, Product Management, Privacy, and Business Analyst teams to support security requirements on every project.
• Assess vulnerabilities - Assist in identifying, researching, and resolving potential risks, threats, vulnerabilities, and exploits in internally developed software, including third-party dependencies and integrations. Participate in security assessments, code reviews, and penetration testing activities.
• Manage security tools - Support the deployment and administration of SAST/DAST tools and web application firewalls. Assist in integrating security tooling into the CI/CD pipeline. Evaluate and support security tooling for AI/ML development environments and AI-assisted coding platforms.
• Assess AI security risks - Support security considerations in AI development life cycles including model training pipelines, data handling, and AI system integrations. Collaborate on security assessments of agentic AI systems and autonomous agents to identify potential risks and vulnerabilities.
• Support incident response - Work closely with the SOC team to investigate and respond to application-related threats, security events, and incidents. Build proactive mitigation methods using technologies such as web application firewalls.
• Audit, document & report - Perform security audits to evaluate the effectiveness of security controls. Contribute to comprehensive documentation of application security processes, assessments, and architecture. Generate reports on application security metrics, vulnerabilities, and remediation progress for management and stakeholders.
• Build security awareness - Conduct and manage application security awareness training for employees. Work closely with development groups to ensure modern programming languages are used and that secure coding best practices are followed.

• Bachelor's Degree in Computer Science, BIT – Application Development Diploma or related studies, and/or equivalent combination of education and experience.
• 5+ years of programming experience.
• Proven expertise in security industry processes and secure coding best practices.
• Demonstrated experience with Microsoft .NET (VB/C#), ASP.NET, Microsoft IIS, Microsoft SQL Server, and Git source control.
• Experience with Microsoft SQL Server and T-SQL queries.
• Strong…