Find work in Canada.

322,248 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 11 mins ago
Assistant Store Manager - Queen St
Bailey Nelson
Toronto, ON
Full-time
…growth plans, so if you're passionate about becoming the best leader you can be, then this just might be the opportunity for…
Added 11 mins ago
Business Centre Practice Lead
Stantec
Edmonton, AB
Full-time
Reporting to the Regional Growth Leader (RGL), the Business Centre Practice Leader (BCPL) is a frontline business development leader accountable for growing Stantec’s Water practice and…
Added 11 mins ago
Corporate Tax, Manager
PwC
Toronto, ON
Full-time
…objectives, with the ability to navigate the client’s business operations to bring ideas for tax efficiency, including for example reorganizations, business expansion, exits, often…
Added 11 mins ago
Manager, Fund Accounting - Private Assets (Traditional PA)
The Citco Group Limited
Toronto, ON
Full-time
The market leader. The premier provider. The best in the business. At Citco, we’ve been the front-runner in our field since our incorporation in 1948 led to the evolution of the asset…
Added 25 mins ago
Inventory Clerk
American Iron & Metal (AIM)
Montreal, QC
Full-time
American Iron & Metal (AIM) is a family-owned company and a recognized global leader in the metal recycling industry, with more than 135 sites and 4,000 employees worldwide. We have…
Added 25 mins ago
Shuttle Train Operator
American Iron & Metal (AIM)
Montreal, QC
Full-time
American Iron & Metal (AIM) is a family-owned company and recognized global leader in the metal recycling industry with more than 125 sites and 4000 employees worldwide. We have continued…
Added 25 mins ago
Simulator Technician - CMLU-EN
CAE
Comox, BC
Full-time
CAE Training Centre Operations supports training excellence across Civil Aviation and Defense & Security by ensuring the reliability, availability, and readiness of training systems,…
Added 25 mins ago
Maintenance/Technical Services Lead-EN
CAE
Comox, BC
Full-time
To support operations in Comox, British Columbia, CAE is seeking an experienced maintenance leader to oversee teams responsible for the preventive and corrective maintenance of training…
Added 25 mins ago
Contract Logistics Operations Manager
Kuehne+Nagel
Mississauga, ON
Full-time
…looking for a dynamic and results-driven Contract Logistics Operations Manager to lead warehouse operations, develop high-performing teams, and ensure exceptional service delivery for our…
Added 25 mins ago
Delivery Driver/Warehouse (Part-Time)
PGW Auto Glass
Dartmouth, NS
Part-time
As a part of our growth, PGW Auto Glass, a leader in the Auto Glass industry with over 100 years experience, is looking for a dedicated and passionate Part-Time Warehouse/Delivery Driver.…
Added 25 mins ago
Continuous Improvement Project Coordinator
Spin Master
Toronto, ON
Full-time
…innovation is a great part of what has made us an industry leader. How do we stay ahead of the pack? By hiring the best and brightest minds - and that’s why we want…
Added 25 mins ago
Superviseur·e, Microbiologie / Supervisor, Microbiology
Jubilant Radiopharma
Kirkland, QC
Full-time
We are seeking an experienced leader to oversee microbiology activities at our Kirkland facility. In this role, you will provide leadership for microbiology laboratory operations,…
Added 25 mins ago
Assistant Service Manager
Pfaff Automotive Partners
Markham, ON
$110,000 to $130,000 CAD / year
Full-time
The Assistant Service Manager supports the Service Manager in overseeing daily department operations, developing team performance, enhancing customer satisfaction, and achieving service…
Added 25 mins ago
Machine Operator
Skyjack Inc.
Guelph, ON
Full-time
…written instructions, diagrams, or models. Inspect welding operations and finished product against specified tolerances using precision measuring tools. Determine and correct minor machine…
Added 25 mins ago
Client Sales Specialist
W85th Rumble Boxing
Calgary, AB
Full-time
Serve as a Vibe Leader and a welcoming face of the studio, setting the tone for an energetic, positive, and inclusive client experience from check-in to class completion.
Added 25 mins ago
Regional Business Manager - West/Prairies
Lock Search Group
Calgary, AB
Full-time
…a global pioneer in carbohydrate chemistry and a recognized leader in the development of innovative treatments for patients with iron deficiency and iron deficiency anaemia. As the…
Added 25 mins ago
Intermediate Environmental Specialist
SUMMIT
Calgary, AB
Full-time
Summit, An Earth Services Company has become the industry leader in the environmental services sector with operations in Canada, the United States, and Australia. Our company focuses on…
Added 25 mins ago
Multi-Unit Clinic Manager
Massage Addict
Ottawa, ON
Full-time
We are seeking a hands-on leader to oversee the day-to-day operations of three clinics. The clinics require an individual with strong leadership and operational management experience, a…
Added 25 mins ago
Head Chef - Gladstone House
The Broadview Hotel Toronto
Toronto, ON · Greater Toronto Area, Canada
Full-time
…The ideal candidate is a passionate, creative, and strategic leader with strong food presentation skills and the ability to inspire, develop, and manage a high-performing…
Added 26 mins ago
Senior Analyst, Investment Accounting
OMERS
Toronto, ON · Head Office Toronto
Full-time
Build strong relationships with Finance peers, including Tax, Legal, Corporate Finance, Valuations, Asset Management, and Investment Operations as well as internal and external audit.
Added 26 mins ago
Représentant(e) - centre d'appels
Global Payments Inc.
Montreal, QC
Full-time
…entreprises de continuer à avancer. En faisant partie d’un leader mondial des technologies de paiement, votre impact se fait sentir chaque jour dans la façon dont les commerçants opèrent et…
Added 26 mins ago
Group Manager, Finance
TD
Toronto, ON
Full-time
Develop relationships with key stakeholders (Segment Finance Partners, TS, Operations, Shared Services, Business Management, Governance, etc.)
Added 26 mins ago
Builder Administrator (Edmonton South)
Trail Appliances Ltd.
AB · Edmonton, Alberta
Full-time
…These values have helped us build a reputation as an industry…
Added 26 mins ago
Senior Maintenance Manager
VCNA
Bowmanville, ON
As the North American operations of Votorantim Cimentos, a global building materials and sustainability solutions leader in 11 countries, we are helping to make a positive impact and are…
Added 26 mins ago
Project Manager (24-month contract)
Champion Petfoods
AB · CPE-Champion Petfoods Holding Inc. (Edmonton)
Full-time
This position requires a highly organized, cross-functional leader who can coordinate creative agencies, marketing brand managers, technical packaging engineers, and supply chain partners…

Actalent

Software Supply Chain Security Engineer

Ottawa, ON, Canada
Nepean, ON, Canada

Pay: $65 to $85 CAD / hour
Job type: Contract
Apply by: Nov 1, 2026
Experience: 5+ years of experience in DevSecOps or software security, with a focus on vulnerability analysis and remediation.
Posting language: English · French
Posted: Oct 2, 2026

Apply About employer

Applications open in a new tab.

Original job description

English section of this bilingual listing.

Job Title: Vulnerability Management Engineer

Job Description

We are seeking a hands-on Software Supply Chain Security Engineer specializing in vulnerability management to identify, investigate, prioritize, and remediate security issues across software products and the development environment. In this role, you go beyond generating security scan reports by deeply analyzing findings from security scanning and AI-assisted tools, determining whether vulnerabilities represent legitimate risks or false positives, and partnering with engineering and security teams to drive practical remediation strategies. You will work directly with scanning tools, source code, software dependencies, and development teams, independently investigating complex findings, tuning tool configurations, and ensuring vulnerabilities are resolved effectively. This position offers the opportunity to help secure software behind advanced AI, cloud, and networking technologies while growing your expertise in DevSecOps and software supply chain security.

Responsibilities

Review and analyze vulnerabilities identified by software composition analysis, static analysis, dependency scanning, and other security tools.
Investigate findings beyond the initial scan output to determine exploitability, severity, business impact, and remediation priority.
Distinguish legitimate vulnerabilities from false positives, duplicate findings, and issues that are not applicable to the product environment.
Identify the source and technical cause of vulnerabilities within application code, open-source components, dependencies, or build configurations.
Partner with software development, security, DevOps, and product teams to develop and implement effective remediation plans.
Participate directly in vulnerability remediation, including updating dependencies, modifying configurations, recommending code changes, or identifying compensating controls.
Interpret detailed security reports and translate technical findings into clear, actionable recommendations for technical and non-technical stakeholders.
Configure and tune security scanning tools to improve detection quality, reduce false positives, and align with the organizations security requirements.
Track and manage a high volume of vulnerabilities through investigation, prioritization, remediation, validation, and closure.
Help integrate security scanning and vulnerability management practices into development and CI/CD workflows.
Evaluate findings generated by AI-assisted security tools and validate their accuracy and relevance.
Document technical findings, remediation decisions, risk assessments, and accepted exceptions in a clear and organized manner.
Collaborate across security, software development, DevOps, and product teams while maintaining the ability to work independently on complex issues.

Essential Skills

5+ years of experience in DevSecOps or software security, with a focus on vulnerability analysis and remediation.
Hands-on experience with security scanning and analysis tools, including Black Duck or similar software composition analysis tools.
Strong programming experience with at least one of Python, C, C++, or Go for investigating and remediating vulnerabilities in code and dependencies.
Practical experience with software supply chain security, including open-source dependencies, SBOMs, SPDX, or CycloneDX.
Familiarity with CVE, CWE, CVSS, exploitability analysis, and risk-based vulnerability prioritization.
Experience integrating security scanning into CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or similar platforms.
Ability to configure and tune security tools, troubleshoot scan results, and systematically reduce false positives.
Knowledge of Linux environments, build systems, package managers, and dependency management in modern software development.
Experience upgrading, replacing, or patching vulnerable software components in complex software ecosystems.
Strong organization, documentation, and communication skills to clearly articulate findings and remediation plans.
Ability to work independently while effectively collaborating with security, software development, DevOps, and product teams.

Additional Skills & Qualifications

Experience with software supply chain security practices and tools, including SBOM generation and management using standards such as SPDX or CycloneDX.
Exposure to AI-assisted security scanning, code analysis, or vulnerability remediation tools and workflows.
Familiarity with embedded software, firmware, C/C++, or systems-level development is an asset.
Understanding of software build systems and CI/CD pipelines, including configuration, automation, and integration of security checks.
Knowledge of common vulnerability databases and frameworks, including CVE, CWE, and CVSS, and the ability to apply them in risk assessments.
Experience in DevSecOps practices, including integrating security into development and operations processes.
Experience working with software composition analysis, static analysis, and dependency scanning tools to manage open-source and third-party risk.
Ability to interpret complex technical security reports and translate them into clear, actionable recommendations.
Comfort working with modern cloud, networking, and AI-related technologies from a security and vulnerability management perspective.

Job Type & Location

This is a Contract position based out of Nepean, ON.

Pay And Benefits

The pay range for this position is $65.00 - $85.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Workplace Type

This is a fully onsite position in Nepean,ON.

À propos d'Actalent

About Actalent

Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email actalentaccommodation@actalentservices.com for other accommodation options.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Use of Artificial Intelligence (AI):We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.

Read the full bilingual original

Review and analyze vulnerabilities identified by software composition analysis, static analysis, dependency scanning, and other security tools.
Investigate findings beyond the initial scan output to determine exploitability, severity, business impact, and remediation priority.
Distinguish legitimate vulnerabilities from false positives, duplicate findings, and issues that are not applicable to the product environment.
Identify the source and technical cause of vulnerabilities within application code, open-source components, dependencies, or build configurations.
Partner with software development, security, DevOps, and product teams to develop and implement effective remediation plans.
Participate directly in vulnerability remediation, including updating dependencies, modifying configurations, recommending code changes, or identifying compensating controls.
Interpret detailed security reports and translate technical findings into clear, actionable recommendations for technical and non-technical stakeholders.
Configure and tune security scanning tools to improve detection quality, reduce false positives, and align with the organizations security requirements.
Track and manage a high volume of vulnerabilities through investigation, prioritization, remediation, validation, and closure.
Help integrate security scanning and vulnerability management practices into development and CI/CD workflows.
Evaluate findings generated by AI-assisted security tools and validate their accuracy and relevance.
Document technical findings, remediation decisions, risk assessments, and accepted exceptions in a clear and organized manner.
Collaborate across security, software development, DevOps, and product teams while maintaining the ability to work independently on complex issues.

Essential Skills

5+ years of experience in DevSecOps or software security, with a focus on vulnerability analysis and remediation.
Hands-on experience with security scanning and analysis tools, including Black Duck or similar software composition analysis tools.
Strong programming experience with at least one of Python, C, C++, or Go for investigating and remediating vulnerabilities in code and dependencies.
Practical experience with software supply chain security, including open-source dependencies, SBOMs, SPDX, or CycloneDX.
Familiarity with CVE, CWE, CVSS, exploitability analysis, and risk-based vulnerability prioritization.
Experience integrating security scanning into CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or similar platforms.
Ability to configure and tune security tools, troubleshoot scan results, and systematically reduce false positives.
Knowledge of Linux environments, build systems, package managers, and dependency management in modern software development.
Experience upgrading, replacing, or patching vulnerable software components in complex software ecosystems.
Strong organization, documentation, and communication skills to clearly articulate findings and remediation plans.
Ability to work independently while effectively collaborating with security, software development, DevOps, and product teams.

Additional Skills & Qualifications

Experience with software supply chain security practices and tools, including SBOM generation and management using standards such as SPDX or CycloneDX.
Exposure to AI-assisted security scanning, code analysis, or vulnerability remediation tools and workflows.
Familiarity with embedded software, firmware, C/C++, or systems-level development is an asset.
Understanding of software build systems and CI/CD pipelines, including configuration, automation, and integration of security checks.
Knowledge of common vulnerability databases and frameworks, including CVE, CWE, and CVSS, and the ability to apply them in risk assessments.
Experience in DevSecOps practices, including integrating security into development and operations processes.
Experience working with software composition analysis, static analysis, and dependency scanning tools to manage open-source and third-party risk.
Ability to interpret complex technical security reports and translate them into clear, actionable recommendations.
Comfort working with modern cloud, networking, and AI-related technologies from a security and vulnerability management perspective.

Job Type & Location

This is a Contract position based out of Nepean, ON.

Pay And Benefits

The pay range for this position is $65.00 - $85.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Workplace Type

This is a fully onsite position in Nepean,ON.

À propos d'Actalent

Actalent est un leader mondial dans les services dingénierie et de sciences ainsi que dans les solutions de talents. Nous aidons des entreprises visionnaires à faire progresser leurs initiatives dingénierie et de science grâce à laccès à des experts spécialisés qui favorisent léchelle, linnovation et la rapidité de mise sur le marché. Avec un réseau de près de 20 000 consultants et 5 000 clients à travers les États-Unis, le Canada, lAsie et lEurope, Actalent dessert de nombreuses entreprises du Fortune 500. Nous sommes fiers dêtre lune des 500 meilleures firmes de conception de lEngineering News-Record (ENR) pour nos services de conception en ingénierie et un lauréat du prix ClearlyRated Best of Staffing® tant pour le service client que pour les talents.

Actalent est un employeur souscrivant au principe de légalité des chances et accepte toutes les candidatures sans tenir compte de la race, du sexe, de lâge, de la couleur, de la religion, des origines nationales, du statut dancien combattant, dun handicap, de lorientation sexuelle, de lidentité sexuelle, des renseignements génétiques ou de toute autre caractéristique protégée par la loi.

Si vous souhaitez faire une demande daccommodement raisonnable, tel que la modification ou lajustement du processus de demande demploi ou dentrevue à cause dun handicap, veuillez envoyer un courriel à actalentaccommodation@actalentservices.com pour connaître dautres options daccommodement.

Ordonnance sur légalité des chances de San Francisco: Conformément à lOrdonnance sur légalité des chances de San Francisco, pour tous les postes situés dans la ville et le comté de San Francisco, nous examinerons les candidatures des personnes qualifiées ayant un casier judiciaire ou des antécédents criminels.

Utilisation de lintelligence artificielle (IA): Nous pouvons utiliser lintelligence artificielle (IA) pour soutenir certaines étapes de notre processus dembauche, notamment la recherche, la présélection et lévaluation des candidatures. LIA aide à analyser les candidatures et les qualifications, mais les décisions finales sont prises par notre équipe de recrutement. En soumettant votre candidature, vous reconnaissez et acceptez que celle-ci puisse être examinée à laide doutils dIA.

About Actalent

Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email actalentaccommodation@actalentservices.com for other accommodation options.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Use of Artificial Intelligence (AI):We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.

Apply About employer

More about this job

Responsibilities

Analyze and prioritize vulnerabilities across application code, open-source dependencies, and build configurations, validating exploitability and distinguishing genuine risks from false positives. Partner with engineering, security, DevOps, and product teams to remediate and validate findings, tune scanning tools, integrate security checks into CI/CD workflows, and document risk decisions.

Requirements

Requires 5+ years of DevSecOps or software security experience focused on vulnerability analysis and remediation, hands-on security scanning experience, and programming proficiency in at least one of Python, C, C++, or Go. Candidates should understand software supply chain security, SBOM standards, vulnerability scoring and prioritization, CI/CD pipelines, Linux, dependency management, and security tool configuration.

Skills

Vulnerability Management
DevSecOps
Software Supply Chain Security
Vulnerability Analysis
Vulnerability Remediation
Software Composition Analysis
Static Analysis
Python
C
C++
Go
SBOM
SPDX
CycloneDX
CI/CD Integration
Linux

Visa sponsorship

Not detected in the job text

Keywords

Vulnerability Management
DevSecOps
Software Supply Chain Security
Software Composition Analysis
Static Analysis
Dependency Scanning
Black Duck
Python
C
C++
Go
SBOM
SPDX
CycloneDX
CVE
CWE
CVSS
Exploitability Analysis
Risk-Based Prioritization
CI/CD
GitHub Actions
GitLab CI
Jenkins
Azure DevOps
Linux
Open-Source Dependencies
Build Systems
Package Managers
AI-Assisted Security Scanning
Firmware

Report this job