Find work in Canada.

505,188 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 28 days ago
A
Mobile Development Lead
Accenture
Toronto, ON
- Full-time
Drive CI/CD, automated testing, observability, DevSecOps, and responsible use of AI-assisted engineering tools.
Added 28 days ago
M
DevOps Specialist
Manulife
Toronto, ON
- Full-time
Added 28 days ago
AI
Java Backend developer - Java 17, DevSecOps, Kubernetes
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Montreal, QC
- Temporary
Java Backend developer - Java 17, DevSecOps, Kubernetes
Added 29 days ago
M
Python Developer, API integration of security tools
Maarut
Quebec, QC
- Contract
Security engineer or DevSecOps profile focused on tool configuration and
Added 29 days ago
C
Senior Java Developer
CGI
Toronto, ON
- Full-time
Contribute to CI/CD pipelines and DevSecOps processes by integrating appropriate security controls and remediation practices into the software delivery lifecycle.
Added 29 days ago
A
Senior Data Engineer, Temporary
Aviso
Toronto, ON
- Temporary
Understanding of DevSecOps practices and tools, including Azure DevOps, Docker CI/CD, and Infrastructure-as-Code models
Added 29 days ago
A
Solution Architect
Aviso
Toronto, ON
- $150,000 to $168,000 CAD / year
- Full-time
Strong knowledge of Agile delivery and DevSecOps practices.
Added 1 month ago
A
DevOps/DevSecOps Developer
Alithya
QC · QC, Canada
- Full-time
En tant que développeur ou développeuse DevOps/DevSecOps, vous concevrez et optimiserez les pipelines CI/CD et l'infrastructure en tant que code (IaC) au sein d'un environnement Azure. Vous…
Added 1 month ago
R
Senior Cloud Security Engineer ( Global Security)
RBC
Vancouver, BC · Toronto, ON
- Full-time
…Security, Containerization, Cybersecurity, Decision Making, DevSecOps, Emerging Technologies, Group Problem Solving, Information Security, Information Technology Security, IT Systems…
Added 1 month ago
GS
Business Systems Developer
Grantek Systems Integration
Burlington, ON
- Full-time
Understanding of DevSecOps, secure coding, and software lifecycle concepts.
Added 1 month ago
TS
Mgr, IT / Gestionnaire, TI
TD SYNNEX Canada ULC
Mississauga, ON
- Full-time
Exposure to DevSecOps principles, application security best practices, and cloud-native architectures.
Added 1 month ago
B
Director, Wealth Digital AI Platforms & Technology Delivery
BMO
Toronto, ON · BMOPLACE
- Full-time
Coach delivery leaders, Scrum Masters, engineering leads, and teams in modern product delivery, DevSecOps, continuous delivery, and learning-driven retrospectives.
Added 1 month ago
TS
Mgr, IT / Gestionnaire, TI
TD SYNNEX
Mississauga, ON
- Full-time
Exposure to DevSecOps principles, application security best practices, and cloud-native architectures.
Added 1 month ago
Director, Data Engineering, International Banking, Toronto, Mexico, Colombia, Peru
Scotiabank
Toronto, ON
Stay current with Databricks, Azure, DataOps, DevSecOps, FinOps, observability, and data engineering practices, translating relevant capabilities into practical standards for the…
Added 1 month ago
B
Senior Staff Data Platform Engineer
Benevity
Remote, Canada
- $137,800 to $178,080 CAD / year
- Full-time
- Remote
Added 1 month ago
B
Senior Staff Data Platform Engineer
Benevity
Remote, Canada
- Full-time
- Remote
Added 1 month ago
T
Data Architect
TD
Toronto, ON
- Full-time
Drive adoption of DevSecOps, automated testing, data contract testing, and CI/CD for data pipelines.
Added 1 month ago
Strategy Advisor, Identity & Access Management
Questrade Financial Group
Toronto, ON
Added 1 month ago
H(
Senior Cloud Security Engineer
HOOPP (Healthcare of Ontario Pension Plan)
Toronto, ON · CA ON Toronto
- $103,000 to $153,000 CAD / year
- Full-time
Knowledge of DevSecOps practices, CI/CD security, AI technologies, and modern engineering tools, including AI-assisted development platforms, is considered an asset.
Added 1 month ago
BD
Principal Software Engineer (IAM)
Black Duck
Calgary, AB
- Full-time
…Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life…
Added 1 month ago
Senior Security Solution Architect - Tangerine
Scotiabank
Toronto, ON
Experience working with public cloud platforms and modern delivery practices such as DevSecOps, CI/CD pipelines, infrastructure as code, containers, and cloud-native architectures.
Added 1 month ago
UR
Forward Deployed Engineer
Urban Ridge Supplies
Toronto, ON
- Full-time
DevOps or DevSecOps experience, including CI/CD ownership, infrastructure automation, and security considerations
Added 1 month ago
UR
Lead Software Engineer, AI & Emerging Tech
Urban Ridge Supplies
Toronto, ON
- Full-time
Familiarity with SDLC best practices, DevSecOps, Agile Scrum/Kanban, and work management tools (JIRA, Confluence, JIRA Align).
Added 1 month ago
T
Senior Security Solution Architect - Tangerine
Tangerine
Toronto, ON
- Full-time
Experience working with public cloud platforms and modern delivery practices such as DevSecOps, CI/CD pipelines, infrastructure as code, containers, and cloud-native architectures.
Added 1 month ago
H
Senior Full Stack Engineer (Azure Cloud Platform)
HCLTech
ON · Ontario, Canada
- $60 to $75 CAD / hour
- Contract
Implement secure coding, cloud security, and DevSecOps practices.

CGI

Senior Java Developer

Toronto, ON, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Oct 28, 2026
Experience: 5+ years of experience identifying, analyzing, and remediating application and infrastructure security vulnerabilities in cloud-based environments.
Posting language: English
Posted: Sep 28, 2026

Original job description

Position Description

We are Canada's largest independent information technology services firm, and at 50 years, we're still growing! Join Canada's largest IT Company as a Senior Java Developer, in our Financial Services Sector in Toronto.

This is a hybrid Senior Java Developer role requiring the successful candidate to work from our downtown Toronto office and/or the client office at a minimum of 4 days per week. The work arrangement is subject to change based on business requirements.

We are seeking a hands-on senior technical resource who can contribute independently within a few weeks of receiving the required access and knowledge transfer. The successful candidate will take ownership of assigned work, proactively resolve technical and security-related issues, and deliver solutions with minimal supervision.

Your future duties and responsibilities

Design, develop, enhance, and maintain enterprise applications using Java, Spring Boot, and related technologies.
Investigate, analyze, prioritize, and remediate application and infrastructure security vulnerabilities across cloud-based environments.
Troubleshoot and resolve security findings affecting application code, RESTful APIs, containers, microservices, and cloud services.
Apply secure coding practices and address common security vulnerabilities, including OWASP Top 10, CVEs, dependency vulnerabilities, IAM, secrets management, encryption, and data protection requirements.
Use vulnerability scanning and code analysis tools such as Snyk, Checkmarx, Veracode, SonarQube, Black Duck, or similar platforms to identify and remediate security findings.
Contribute to CI/CD pipelines and DevSecOps processes by integrating appropriate security controls and remediation practices into the software delivery lifecycle.
Conduct code reviews and peer reviews to identify security vulnerabilities, maintain coding standards, and support compliance with organizational requirements.
Perform root cause analysis for security and performance issues and implement sustainable long-term solutions.
Provide technical direction and coordinate with offshore team members to support delivery, resolve technical issues, and ensure commitments are met on time.
Collaborate with security teams, architects, business stakeholders, and development teams to prioritize vulnerabilities, develop remediation plans, and communicate delivery status.

Required Qualifications To Be Successful In This Role

5+ years of experience identifying, analyzing, and remediating application and infrastructure security vulnerabilities in cloud-based environments.
Strong hands-on experience with Java, Spring Boot, and related technologies in enterprise environments.
Strong understanding of secure coding practices and common security vulnerabilities, including OWASP Top 10, CVEs, and dependency management.
Hands-on experience with vulnerability scanning and remediation tools such as Snyk, Checkmarx, Veracode, SonarQube, Black Duck, or similar platforms.
Proficiency with cloud platforms such as AWS, Azure, or GCP, including implementation of security best practices and controls.
Strong knowledge of RESTful APIs, microservices architecture, and enterprise application integration patterns.
Experience with CI/CD pipelines and integrating security controls into DevSecOps processes.
Familiarity with containerization technologies such as Docker and orchestration platforms such as Kubernetes or OpenShift.
Strong understanding of IAM, secrets management, encryption, and data protection best practices.
Experience working in Agile/Scrum environments and managing multiple priorities in a fast-paced delivery setting.
Strong communication, collaboration, and technical leadership skills, including the ability to coordinate with offshore team members and provide technical direction.
Strong documentation skills, including the ability to prepare technical designs, remediation plans, and stakeholder status reports.
Ability to collaborate effectively with security teams, architects, business stakeholders, and development teams to prioritize and remediate vulnerabilities.

Nice to have -

Prior experience managing or mentoring offshore teams.
Experience with enterprise vulnerability remediation programs and security compliance initiatives.
Financial services or other highly regulated industry experience.
Relevant certifications such as AWS Certified Developer, Azure Developer Associate, Certified Secure Software Lifecycle Professional (CSSLP), or similar.
Prior experience supporting large-scale, mission-critical applications with stringent security and availability requirements.
CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $80,000–$130,000. This role is an existing vacancy.

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our team - one of the largest IT and business consulting services firms in the world.

Apply About employer

More about this job

Responsibilities

Design, develop, and maintain enterprise applications using Java and Spring Boot while identifying and remediating security vulnerabilities across applications, infrastructure, and cloud environments. Integrate security controls into CI/CD and DevSecOps processes, conduct reviews and root cause analysis, and coordinate with offshore teams and stakeholders to deliver secure solutions.

Requirements

Requires 5+ years of experience identifying and remediating security vulnerabilities in cloud environments, along with strong hands-on Java and Spring Boot experience. Candidates should have expertise in secure coding, vulnerability scanning tools, cloud security, APIs and microservices, CI/CD, containers, IAM, and technical collaboration and communication.

Skills

Java
Spring Boot
Application Security
Cloud Security
Secure Coding
OWASP Top 10
Vulnerability Remediation
Snyk
Checkmarx
Veracode
SonarQube
Black Duck
AWS
Azure
GCP
DevSecOps

Visa sponsorship

Not detected in the job text

Keywords

Java
Spring Boot
Enterprise Applications
Application Security
Infrastructure Security
Cloud Security
OWASP Top 10
CVE
Dependency Management
Snyk
Checkmarx
Veracode
SonarQube
Black Duck
AWS
Azure
GCP
RESTful APIs
Microservices
CI/CD
DevSecOps
Docker
Kubernetes
OpenShift
IAM
Secrets Management
Encryption
Agile
Scrum
Financial Services

Report this job