Jobs in Canada

Group jobs by employerSave search & get alerts

Added 1 day ago
Senior Systems Engineer - AWS
BoehringerPRD
Canada
Responding to cloud environment issues and monitoring alerts (ex. portal access, security findings, etc.)
Added 1 day ago
Software Engineer, AI
Softchoice
Calgary, AB · NL · Oakville, ON · Ottawa, ON · Vancouver, BC · Toronto, ON
…AI-driven solutions that empower businesses with intelligent automation, data-driven insights, and next-generation software…
Added 1 day ago
M
Digital Payload Architect
MDA
Sainte-Anne-de-Bellevue, QC
- Full-time
…subsystems across multiple satellite programs. This role is a senior technical bridge between customers, prime contractors and MDA’s multidisciplinary payload engineering teams, ensuring…
Added 1 day ago
QI
Senior Platform Engineer - Infra and Tooling
Quartermaster inc.
Toronto, ON
- Full-time
- Hybrid
The Senior Developer Operations is a key contributor responsible for delivering high-quality, scalable software across the frontend and backend. This role involves building performant UIs,…
Added 1 day ago
PA
Toronto Technology Audit & Advisory (Financial Services) Senior Consultant
Protiviti, A Div of RH Canada
Toronto, ON
- Full-time
Protiviti is looking for a Technology Audit & Advisory Senior Consultant to join our growing Financial Services team.
Added 1 day ago
CW
Senior Engineer – Cloud Platforms & Virtualization
Canada Wind River
ON
- Full-time
…powering billions of systems that require the highest levels of security, safety, and…
Added 1 day ago
S
Senior AI Security Automation Engineer
SSB&T
Toronto, ON
- $120,000 to $217,500 CAD / year
- Full-time
State Street's Cyber Data & Analytics (CyberDNA) team is seeking a Senior AI Security Automation Engineer to help shape the next generation of cybersecurity data, analytics, and AI-powered…
Added 1 day ago
E(
Senior Principal Engineer, Enterprise Networking Architecture, Automation and AI
Equinix (US) Enterprises, Inc.
Toronto, ON
- Full-time
- Hybrid
Equinix is seeking a Sr Principal Engineer to serve as a senior technical authority for the architecture, automation, telemetry, and continued evolution of our global corporate enterprise…
Added 1 day ago
CS
Sr. Manager, Technical Architect – Enterprise AI Solutions
Canadian Solar Inc.
Canada
- Full-time
- Hybrid
…development of scalable AI platforms, enterprise copilots, automation frameworks, and advanced analytics capabilities supporting Sales, Manufacturing, Supply Chain, Engineering, Finance,…
Added 1 day ago
CS
Sr. SAP S/4HANA PCE Operations & Integration Lead
Canadian Solar Inc.
Kitchener, ON
- Full-time
- Hybrid
Position Title: Senior SAP S/4HANA PCE Operations & Integration Lead
Added 1 day ago
C
Senior Engineer
Caylent
Canada
- $131,000 to $147,000 CAD / year
…development, data and analytics, DevOps, managed services, security and compliance, and customer experience transformation. At Caylent, our people always come…
Added 1 day ago
CS
Senior Staff AWS Platform Engineer
Cerebras Systems
Toronto, ON
- Full-time
- Hybrid
- Develop automation, integrations, and infrastructure-as-code solutions using Terraform and programming languages such as Python and Go.
Added 1 day ago
CS
AI Inference Core - Senior Senior Software Engineer for DevOps
Cerebras Systems
Toronto, ON
- Full-time
- Hybrid
These systems are primarily built in Python, but the work goes far beyond scripting or automation. Our frameworks act as the control plane for distributed workflows, managing resources,…
Added 1 day ago
C
Software Engineer, Security Agents
Cohere
Canada
- $215,000 to $325,000 USD / year
- Full-time
- Hybrid
Ready to build AI agents that revolutionize enterprise security? The North Security team is looking for a Senior Software Engineer to create autonomous systems that handle the complex,…
Added 1 day ago
I
Senior Director, Software Engineering
Infoblox
Vancouver, BC · Greater Vancouver Metropolitan Area
- Full-time
We have an opportunity for Senior Director, Software Engineering to join our SaaS TD team, reporting to the VP of Engineering. In this role, you will provide technical leadership and direct…
Added 1 day ago
SM
RQ11871 – Systems Testing/QA Specialist – Senior
S M Software Solutions Inc
Toronto, ON
- Internship
Work Arrangement: Onsite – 5 Days per Week
Added 1 day ago
C
Gen AI Architect (Hybrid)
Cognizant
Toronto, ON
- Full-time
Advanced hands-on proficiency with Python and modern software engineering practices for building APIs, automation solutions, orchestration frameworks, and data processing services.
Added 1 day ago
A
Senior DevSecOps Engineer
Ashby
Canada
- Full-time
You’ve built and operated CI/CD, developer tooling, or infrastructure automation used by other engineers. You can write maintainable code, explain the failure modes of what you shipped, and…
Added 1 day ago
A
Senior Security Platform Engineer - Secure Delivery
Ashby
Canada
- Full-time
You’ve built and operated CI/CD, developer tooling, or infrastructure automation used by other engineers. You can write maintainable code, explain the failure modes of what you shipped, and…
Added 1 day ago
QF
Senior Data Engineer
Questrade Financial Group
Toronto, ON · Greater Toronto Area, Canada
- Full-time
…infrastructure across environments using Terraform, embedding CI/CD automation, security best practices, and cost-effective resource management into all data platform…
Added 1 day ago
SC
Spécialiste DevOps (Senior)
SII Canada
Montreal, QC
- Full-time
Le rôle est hybride et requiert une présence sur site deux jours par semaine, les mardis et jeudis · This is a hybrid role requiring on-site presence two days per week, on Tuesdays and Thursdays
Added 1 day ago
B
Linux and Open Source Platform Specialist
Bombardier
Dorval, QC
- Full-time
Working closely with Infrastructure, Cloud, DevOps, Virtualization, Network, Security, Application, Architecture, and project teams, the position supports complex operational issues while…
Added 1 day ago
B
Network Infrastructure Specialist
Bombardier
Dorval, QC
- Full-time
Working knowledge of network automation and scripting, such as Python, Ansible, APIs, or Infrastructure-as-Code technologies, with an interest in reducing manual network administration.
Added 1 day ago
B
Infrastructure Security Specialist
Bombardier
Dorval, QC
- Full-time
Working knowledge of security automation and scripting, such as Python, PowerShell, Ansible, APIs, or equivalent technologies, with an understanding of Infrastructure-as-Code and DevOps…
Added 1 day ago
C
Sr. Consultant, Data Developer
CIBC
Toronto, ON
- Full-time
…Distribution & Cards Technology (DCT). As a Sr. Consultant, Data Developer, you’ll be a senior technical leader in CAM’s technology transformation, modernizing the collections, recovery and…

Ashby

Senior DevSecOps Engineer

Canada

Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Nov 13, 2026

Original job description

Hi 👋🏻 I’m Louis, Head of Security. You’ll report directly to me.

What Ashby gives you in return is the best of both early and growth-stage environments. The agency and no-nonsense of a seed startup: you contribute to useful projects, make practical decisions, and work in an almost-no-meeting culture. The product-market fit and scale of a growth-stage startup: tens of thousands of daily users who depend on our software, and customers whose trust your work will help us earn.

We have notable customers like Notion, Linear, Shopify, and Snowflake. Our growth and retention metrics are best-in-class among our peers: we have tens of millions in ARR, growing >100% year over year, very low churn, and many years of runway. We’ll share more details once we meet.

You’ll join our Security team, a single team with multiple specializations overseeing security across the business. I report to Abhik, our Co-Founder and VP of Engineering. We’re bubbling with ideas on how to support Talent Acquisition through software, and we’ve started the journey of building products beyond Talent Acquisition. We read every application and aim to respond to yours within 3-4 days (often sooner).

Role Overview

We’re looking for an engineer with a passion to learn whose focus is on building “paved roads” specifically around making secure delivery part of the way we build and ship software. You’ll operate the checks and workflows around our delivery pipeline, help engineers act on useful findings, and make routine exceptions straightforward under agreed policies.

We expect you to bring the same care to the reliability of a security check and the time it costs an engineer as you bring to the risk it addresses. You’ll build the integrations, learn from rollout, and maintain what you ship.

We have notable customers like Notion, Linear, Shopify, and Snowflake. Our growth and retention metrics are best-in-class among our peers: we have tens of millions in ARR, growing >100% year over year, over 2500 customers, very low churn, and many years of runway. We’ll share more details once we meet, but you now probably have a good idea as to why we're hiring for this role 😅.

About The Role And How We Work

We’re also advertising this opening as Senior Security Platform Engineer - Secure Delivery. Both titles describe the same position; please apply once using the title that best reflects your experience.

Your mission is to make our delivery pipeline secure by default across application code, infrastructure, dependencies, containers, and product configuration. You’ll own the technical implementation and operation of delivery-security tooling and controls, including integration, configuration, tuning, reliability, and coverage.

Product Engineering teams own triage and remediation for the features they maintain. Application Security provides specialist analysis and defines product-security test requirements. Infrastructure retains ownership of the underlying cloud platform. You’ll work with those teams to make agreed checks and policies run reliably in the delivery workflow.

In Practice, You’ll

Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in our CI/CD workflows.
Inventory production repositories and delivery paths, including prompts and model configuration. Make scanner coverage distinct from application-specific tests of AI behavior; AppSec defines those tests, and you operate agreed delivery checks.
Start new checks in report-only mode where appropriate, then implement agreed warn and block policies using exploitability, exposure, and compensating controls.
Give engineers self-service exceptions within documented rules, with an owner, justification, expiry, and audit trail. Escalate decisions outside those rules to Security leadership with the relevant specialist analysis.
Build automation and AI-assisted workflows that enrich findings, propose fixes, and support Product Engineering’s triage under documented criteria. Preserve required checks, review, and rollback for automated patch changes.
Make coverage, integration failures, finding age by risk, time to triage and remediate, false blocks, build delay, and bypasses visible. Record mitigations separately from completed fixes and connect useful telemetry to GRC evidence.
Work with Infrastructure on cloud-posture monitoring, useful critical-misconfiguration alerts, and bounded remediation automation.
Extend into shared-image hardening and artifact provenance as the delivery foundations mature.

To Ground It With Examples, You Could

Roll out secret scanning with push protection and make a blocked push understandable and actionable for an engineer.
Turn a repeated scanner-exception request into a PR workflow with a reason, expiry, and evidence for revisiting it.
Reproduce a dependency issue in the application, add a regression check, and build a workflow that proposes a patch with useful evidence.
Show which delivery paths are covered, where checks fail, and whether enforcement is addressing risk while keeping build delays reasonable.

Why You Should and Shouldn’t Apply

You’ve built and operated CI/CD, developer tooling, or infrastructure automation used by other engineers. You can write maintainable code, explain the failure modes of what you shipped, and use security evidence to make a practical rollout decision. Supply-chain and scanner experience is useful; you can learn individual tools as part of the work.

You’ve applied AI in engineering and can explain how you check its outputs and permissions. You enjoy treating engineers as users, making build-versus-buy decisions, and improving adoption and reliability after launch.

You Might Not Enjoy The Role If

You prefer to deliver a prototype and hand off its operation. Reliability, tuning, and existing integrations are part of the work.
You prefer a prescribed backlog to investigating an ambiguous problem, writing a proposal, and bringing partners into the work.
You want standalone assessments to be your main output. This role centers on working delivery capabilities and their adoption.

Interview Process

If This Also Sounds Exciting To You, Please Apply. We Review Every Application And Aim To Get Back To Candidates Within 2-3 Days. For Candidates Who Advance To The Interview Process, Here Is What You Can Expect

Recruiter Screen - 30 mins
Hiring Manager Intro Call - 20 mins
Past Projects Deep Dive - 45 mins
Founder Screening - 45 mins
Take-Home Assessment + Practical Assessment Review - 1 hr (2-3 spent on take-home assignment)
Cross-Functional Stakeholder Interview - 45 mins

Role-Specific Technology and Tools

For this role, CI/CD and infrastructure automation experience matter more than familiarity with a particular scanner. GitHub Actions or comparable systems, Terraform, containers, and cloud controls are relevant. You should be comfortable writing production automation in TypeScript, Python, Go, or a comparable language. Tool choices and individual scanner integrations are part of the work.

Your First Three Months at Ashby

Your early changes will give you a tour of our codebase, infrastructure, and best practices, increasing in scope and ambiguity as you learn how we work. You’ll pair program with your onboarding peer as you learn the delivery workflows.

Your Initial Focus Will Be To

Map production delivery paths and gaps across code, infrastructure, prompts, configuration, and evals, with clear ownership of the different checks.
Deliver a bounded scanning integration, such as secret push protection or report-only static analysis, with a usable finding workflow.
Establish initial warn, block, and self-service exception rules with the relevant partners and make Product Engineering ownership visible.
Baseline coverage, integration failures, false blocks, and build delay so the next rollout has evidence to build on.

Early progress means engineers can use the selected checks, act on their findings, and handle routine exceptions. Broader rollout follows the agreed risk policy and what the first integration teaches us.

Benefits

Competitive salary and equity.
10-year exercise window for stock options. You shouldn’t feel pressure to purchase stock options if you leave Ashby - do it when you feel financially comfortable.
Unlimited PTO, and we will encourage you to take it.
A minimum of 12 weeks of fully paid parental leave, covered by Ashby. The actual number may increase to satisfy local requirements.
Generous equipment, software, and office furniture budget. Get what you need to be happy and productive!
$100/month education budget with more expensive items (like conferences) covered with manager approval.
If you’re in the US, we offer top-tier health insurance for you and your dependents, with 100% of premiums covered by Ashby. In other countries, we provide high-quality supplemental health insurance for you and your dependents, also fully covered by us.

Closing

Ashby’s success hinges on hiring great people and creating an environment where we can be happy, feel challenged, and do our best work. We’re being deliberate about building that environment from the ground up. I hope that excites you enough to apply.

Ashby provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity, or gender expression. We are committed to a diverse and inclusive workforce and welcome people from all backgrounds, experiences, perspectives, and abilities.

Ashby is committed to a fair and transparent hiring process. We confirm that this advertisement is for an active, existing vacancy within our organization. Please be advised that we may use artificial intelligence-driven tools to assist our recruitment team in screening, assessing, and selecting candidates for this position.

Compensation Range: $178K - $250K

Apply on LinkedIn About employer

More about this job

Responsibilities

Build, integrate, operate, and maintain security checks and workflows across CI/CD delivery paths, including application code, infrastructure, dependencies, containers, secrets, and product configuration. Establish risk-based enforcement and exception processes, improve finding workflows and automation, and measure coverage, reliability, remediation, and developer impact in partnership with Product Engineering, AppSec, and Infrastructure.

Requirements

Candidates should have experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers, and be able to write maintainable production automation and make practical security rollout decisions. Relevant experience includes CI/CD systems, Terraform, containers, cloud controls, security scanning or supply-chain security, and applying AI in engineering with appropriate checks on its outputs and permissions.

Skills

CI/CD
DevSecOps
Security Automation
Static Analysis
Dependency Scanning
Secret Scanning
Container Security
Infrastructure as Code Scanning
Terraform
GitHub Actions
Cloud Security
Supply Chain Security
TypeScript
Python
Go
AI-Assisted Engineering

Benefits

Competitive Salary
Equity
10-Year Stock Option Exercise Window
Unlimited Paid Time Off
Paid Parental Leave
Equipment and Office Furniture Budget
Education Budget
Health Insurance

Visa sponsorship

Not detected in the job text

Hiring contact

Louis

Keywords

DevSecOps
Secure Delivery
CI/CD
GitHub Actions
Terraform
Containers
Cloud Controls
Static Analysis
Dependency Scanning
Secret Scanning
Container Scanning
Infrastructure as Code
Supply Chain Security
Artifact Provenance
Cloud Posture Monitoring
Security Automation
TypeScript
Python
Go
AI-Assisted Workflows
Prompt and Model Configuration
Risk-Based Enforcement
Security Exceptions
GRC Evidence
Vulnerability Remediation
Regression Testing
CI/CD Reliability
Developer Tooling

Report this job

Work requirements

Jobs in Canada