Staff Application Security Specialist
Workleap — Canada - Remote
Posted 2026-04-22
Company Description Workleap is a Montreal-based tech company, founded in 2006. We're builders at heart, we make simple products that actually matter to the people who use them. We have two product lines: Workleap Agent , our newest solution built to make every manager more effective, and ShareGate , the world's leading solution for Microsoft 365 migration and governance. More than 15,000 companies worldwide trust us to do exactly that. We're intentional about who joins us. If you're the kind of person who gets excited by a hard problem and wants to help shape what comes next, there's a place for you here. Your role You will build the security layer for how Workleap writes software, and then you will teach it to run itself. Today that means the traditional stack done properly. SAST, DAST, SCA, and secret scanning wired into GitHub Actions so findings land where developers already work, with the noise tuned out rather than tolerated. Threat modeling on architectural changes. Vulnerability intake and triage that closes the loop instead of filling a backlog. Where it goes next is the actual reason this role exists. We are moving toward agentic security review, where agents perform the