Jobs in Canada

Group jobs by employerSave search & get alerts

Added 1 day ago
AE
VP Actuarial Modeling
Athene Employee Services, LLC
Toronto, ON
- Full-time
The VP of Actuarial Modeling will lead the design, execution, and governance of Athene's actuarial model production processes supporting quarterly and monthly closes across GAAP and…
Added 1 day ago
AI
Principal Software Development Engineer
AMD, Inc.
Vancouver, BC
- Full-time
…customers, and raise the bar for quality, operability, and developer experience across teams. Tech context (indicative): AI model inference, optimization and scaling, Kubernetes, Python,…
Added 1 day ago
P
Senior Automation & Performance Test Engineer
Procom
Toronto, ON
- $53.25 to $71 CAD / hour
- Contract
We are seeking a Senior Automation & Performance Test Engineer to lead the design, development, and execution of automated and performance testing solutions for enterprise applications. The…
Added 1 day ago
Network Operations Engineer, Deloitte Global Technology
Deloitte
Toronto, ON
…professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our…
Added 1 day ago
LC
Software Development Manager
Lightspeed Commerce, Inc.
Toronto, ON
- Full-time
- Hybrid
Lightspeed Financial Services is looking for a Software Development Manager in North America to grow and lead our technical team within the Financial Services organization.
Added 1 day ago
LC
Software Development Manager
Lightspeed Commerce, Inc.
Montréal, QC
- Full-time
- Hybrid
Lightspeed Financial Services is looking for a Software Development Manager in North America to grow and lead our technical team within the Financial Services organization.
Added 1 day ago
NS
Operations & SRE Manager
Netskrt Systems Inc.
Vancouver, BC
- Full-time
Lead Operations and Service Reliability Engineering resources responsible for alert, monitoring, Event Management, and automated tooling across the Netskrt service footprint
Added 1 day ago
Senior Security Architect
Black Duck Software, Inc.
Calgary, AB
Automate controls, enrichment, and remediation workflows using Python, Bash, cloud APIs, and infrastructure as code (Terraform, Helm).
Added 1 day ago
VG
Staff AI Engineer
Veralto Global
London, ON
- $190,000 to $220,000 CAD / year
- Full-time
Reporting to the Head of AI, the Staff AI Engineer will lead the architecture, development, and operation of production AI systems while advancing how engineering teams build software with…
Added 1 day ago
C
ASIC Development Technical Leader
Cisco
Vancouver, BC
- Full-time
You will be in the Silicon One development organization as an ASIC Implementation Technical Lead with a primary focus on Design-for-Test. You will work with Front-end RTL teams, backend…
Added 1 day ago
Staff Platform Engineer
Clutch Technologies Inc.
Toronto, ON
…standards, and build the self-service tooling, infrastructure, and developer workflows that become the foundation for how engineering operates. From CI/CD and cloud infrastructure to…
Added 1 day ago
PA
Domain Consultant - Canada
Palo Alto Networks, Inc.
Toronto, ON · Montréal, QC · Vancouver, BC · Calgary, AB
- Full-time
…Sales Account Executives to drive complex enterprise deals, lead discovery, execute technical evaluations, and demonstrate how Palo Alto Networks delivers core security value across…
Added 1 day ago
CS
ASIC Development Technical Leader
Cisco Systems Canada Co.
Vancouver, BC
- Full-time
- Hybrid
You will be in the Silicon One development organization as an ASIC Implementation Technical Lead with a primary focus on Design-for-Test. You will work with Front-end RTL teams, backend…
Added 1 day ago
AN
Senior Enterprise AI Solutions Lead
Astra North Infoteck Inc.
Regina, SK
- Contract
You will lead and deliver AI initiatives independently in collaboration with the business, from discovery through solution design, hands-on implementation, production support, and benefits…
Added 1 day ago
GV
DERMS Intermediate Solutions Specialist
GE Vernova
ON · AB · BC · MB · NB · NL · NS
- Full-time
Lead the custom adapter, connector, API, or microservice design and development to fully integrate the GE GridOS DERMS solution into the client environment.
Added 1 day ago
C
Senior Data Engineer
CarePartners
Waterloo, ON · London, ON
- Full-time
Lead the organization's Data Governance framework through the Data Governance Council,establishing standards for data ownership, stewardship, quality, access, and lifecycle management.
Added 1 day ago
Staff Applied AI Engineer - Kalepa for Underwriting
Kalepa
Canada
Lead the technical, data, and project aspects of Kalepa's key applied AI initiatives: document extraction, classification, entity matching, and the evaluation platform behind them.
Added 1 day ago
S
C# SQL Developer
SPECTRAFORCE
Toronto, ON
- On-site
…Server and Databricks. These entail bulk of the work items for a developer on a day 2 day. Additionally, there are UI and reporting tools in Plotly, Nexus, PowerBI all integrated with…
Added 1 day ago
C
Actuarial Consultant
Co-operators
Toronto, ON · Guelph, ON · Montréal, QC
- Full-time
Work Model: Hybrid (2 days in office)
Added 1 day ago
MM
Lead Workforce Scientist
MCD McKesson Canada Corporation / La Corporation McKesson Canada
Mississauga, ON
- Full-time
- Hybrid
Lead Workforce Scientist (P5) | Focus Area: Strategic Workforce Planning & Organizational Effectiveness
Added 1 day ago
CO
Staff Software Engineer - Capital One Travel Tech - Full-stack
Capital One Canada
Toronto, ON
- $173,000 to $197,400 CAD / year
- Full-time
Act as a tech lead developer owning technical design and development of cross-functional, multi-platform, fault tolerant application systems
Added 1 day ago
RC
Business Analyst Expert - 109666
Randstad Canada
Toronto, ON
- $69.58 to $77.77 CAD / hour
- Contract
Hybrid Work Flexibility: Downtown Toronto office location with a collaborative hybrid schedule (1–2 days per week on-site)
Added 1 day ago
A
Head of Applied Science and AI Delivery
AXIS
Halifax, NS
- Full-time
Build reusable capabilities: Lead the design and development of shared AI services, analytical models, accelerators, agent frameworks, evaluation frameworks, experimentation environments…
Added 1 day ago
P
Senior AI Solutions Lead
Procom
Regina, SK
- Contract
Senior AI Solutions Lead: On behalf of our client, Procom is searching for a Senior AI Solutions Lead for a 15-month role. This position is onsite at our client’s Regina office. Senior AI…
Added 1 day ago
Senior AI Solutions Lead
Visionpool Business Services
Regina, SK
Must have a minimum of five (5) years experience delivering software solutions; · Must have a minimum of two (2) years experience developing AI solutions;

Black Duck Software, Inc.

Senior Security Architect

Calgary, AB, Canada

Apply on job-boards.greenhouse.io About employer

Applications open in a new tab.

Job details

Experience: Experience: typically 5 or more years in information security, including at least 3 years hands-on securing production cloud environments at scale.
Posting language: English
Posted: Jul 14, 2026

Original job description

Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.

Job Title: Sr Security Architect

Reports to (Direct Title): Sr. Manager, Threat Intelligence

Department: Cybersecurity Operations

Position Summary

This role secures the multi-cloud infrastructure behind Black Duck's SaaS platforms. The Sr Security Architect will work on cloud security controls from design to operation: maintaining the baseline, finding where the environment departs from it, and working with engineering and platform teams until the risk is closed. The role is hands-on in the tooling and in the code, and automates anything done more than twice. This role works with broad autonomy and carries project-level technical leadership. The role leads cloud security projects or parts of larger initiatives, act as a technical resource for less experienced team members, and communicates risk clearly to technical teams and management.

Essential Functions/Responsibilities

Contribute to and maintain Black Duck's cloud security baseline: standards, guardrails, and reference configurations for GCP, Azure, and AWS, written so engineering teams can actually apply them.

Design, build, and operate preventive and detective controls for SaaS workloads, including identity and access (IAM, workload identity, service accounts), network segmentation, encryption and key management, secrets handling, and logging coverage.

Operate, tune, and enhance the cloud-native application protection platform (Wiz or comparable CNAPP): onboarding cloud accounts and Kubernetes clusters, writing and tuning policies and custom controls, cutting noise, and maturing coverage from agentless scanning to runtime sensors.

Triage posture, vulnerability, and identity findings by real exposure and exploitability, not by raw severity, then partner with resource owners to prioritize and complete remediation, tracked against policy SLAs.

Conduct security reviews and provide recommendations for new cloud services, architectures, and third-party integrations, using threat modeling and proofs of concept, before they reach production.

Secure containerized and Kubernetes platforms (GKE, AKS, EKS): cluster hardening, RBAC, admission control and policy as code, image provenance, and runtime protection.

Build security into CI/CD and infrastructure-as-code workflows (IaC scanning, image scanning, secrets detection, policy gates) so issues are caught before deployment rather than found in production.

Contribute to software supply chain integrity for build and deployment pipelines, consistent with Black Duck's position as a software supply chain security company.

Develop and maintain cloud detections from audit logs, control-plane events, and CNAPP signals; validate that the telemetry they depend on is actually collected.

Support the CSIRT on cloud incidents: scoping, containment, evidence preservation, cloud forensics, and remediation, including post-incident hardening.

Automate controls, enrichment, and remediation workflows using Python, Bash, cloud APIs, and infrastructure as code (Terraform, Helm).

Lead defined cloud security projects and contribute to workstreams within complex cross-functional initiatives across engineering, platform, IT, and vendor partners.

Provide technical guidance to less experienced team members, participate in peer reviews, and share cloud security best practices.

Communicate cloud security risks and recommended actions to technical teams and management, supporting senior-level discussions as needed.

Produce evidence and control documentation that supports SOC 2 and ISO 27001 audits and customer security reviews.

Keep current on cloud attack techniques, provider security changes, and emerging threats, and recommend systematic improvements.

Other tasks and activities as assigned.

Required Education/Experience & Skills

Experience: typically 5 or more years in information security, including at least 3 years hands-on securing production cloud environments at scale.

Cloud depth: in-depth conceptual and practical knowledge of at least one major provider (GCP, Azure, or AWS) and working fluency in a second, covering IAM models, networking, logging, and native security services. Production experience with GCP and Azure is a strong advantage.

Kubernetes and containers: hands-on experience securing Kubernetes clusters and container workloads in production.

CNAPP: hands-on experience with Wiz or a comparable CNAPP, especially policy development, custom controls, and runtime sensor deployment; plus cloud logging, monitoring, and vulnerability management platforms at scale.

Automation: strong Python and/or Bash for security automation and integration; comfortable working directly with cloud provider APIs.

Infrastructure as code: practical experience with Terraform, Helm, or equivalent, including reviewing IaC for security issues.

Compliance: familiarity with SOC 2, ISO 27001, and FedRAMP frameworks (framework knowledge).

Leadership: experience leading projects or parts of complex projects and building consensus across teams.

Communication: strong written and verbal English; able to explain complex or sensitive security issues to technical and executive audiences.

Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience. Relevant certifications are a plus (e.g., CKS, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, AWS Certified Security Specialty, CCSP, CISSP, or GIAC).

Physical Requirements

General office environment and responsibilities requiring:

Extensive use of the computer which involves viewing a monitor and keyboarding for most of the workday

Placing and receiving phone calls

Occasionally moving and lifting objects up to 20 pounds

May require some travel as needed.

Black Duck is an equal opportunity employer. We consider all applicants for employment without regard to race, color, national origin, religion, sex, gender identity or expression, age, disability, sexual orientation, veteran or military service status, or any other characteristic protected by applicable law. Black Duck complies with all applicable laws prohibiting employment discrimination in every jurisdiction where it operates and provides reasonable accommodations to individuals with disabilities in accordance with applicable law.

Apply on job-boards.greenhouse.io About employer

More about this job

Responsibilities

The Senior Security Architect at Black Duck Software will design, operate and tune cloud security controls across GCP, Azure and AWS. The role also reviews cloud services, secures Kubernetes and CI/CD pipelines, and leads cloud security projects while guiding less experienced team members.

Requirements

Black Duck Software needs 5+ years in information security with 3+ years securing production cloud environments. Candidates need deep knowledge of at least one major cloud provider, Kubernetes and CNAPP experience, strong Python or Bash, and Terraform or Helm skills.

Skills

Wiz
CNAPP
Kubernetes
GKE
AKS
EKS
Google Cloud Platform
Microsoft Azure
AWS
IAM
Workload identity
Network segmentation
Key management
Terraform
Helm
Infrastructure as code
Python
Bash
Cloud APIs
RBAC
Admission control
Policy as code
Container image security
Runtime protection
Threat modeling

Keywords

Cloud security
Security architect
CNAPP
Wiz
Kubernetes
GKE
AKS
EKS
GCP
Azure
AWS
IAM
Terraform
Helm
Python
Bash
DevSecOps
CI/CD
Infrastructure as code
SOC 2

Seniority

Senior

Tools

Wiz
Terraform
Helm
Python
Bash
Kubernetes

Languages

English

Fields of study

Computer Science
Information Security

Report this job

Work requirements

Jobs in Canada