Movojobs
Back to results

Added

J&M Group

Senior DevSecOps & AI Engineer

  • Toronto, ON, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type
Contract
Apply by
Posting language
English
Posted

Original job description

We are hiring for a Senior DevSecOps & AI Engineer. This role focuses on application security, DevSecOps, cloud security, and AI/LLM security across enterprise applications and platforms.

The ideal candidate will have 6+ years of security engineering experience with strong expertise in offensive security, vulnerability management, and security automation.

What You Bring

  • 6+ years of experience in Application Security, DevSecOps, Offensive Security, or Security Engineering
  • Strong experience with SAST, DAST, secure code review, and vulnerability management
  • Hands-on penetration testing experience across web, API, mobile, cloud-native, and AI-powered applications
  • Experience with AI/LLM security, including prompt injection, prompt manipulation, and jailbreak testing
  • Strong understanding of SDLC, SSDLC, DevSecOps, and MLOps practices
  • Experience securing cloud-native and AI-enabled applications
  • Strong Python scripting and security automation experience
  • Experience with Azure cloud security
  • Experience with Kubernetes, container security, and container image analysis
  • Experience with SCA and open-source security
  • Experience with GitHub security controls
  • Experience with threat modeling and risk assessment
  • Bachelor s or master s degree in Computer Science, Information Security, Cyber Security, or a related discipline
  • Any 2 3 of the specified security or cloud security certifications

What You'll Do

  • Perform security assessments and penetration testing across web, API, mobile, cloud-native, and AI-powered applications
  • Conduct secure code reviews and identify application security weaknesses
  • Validate findings from SAST, DAST, SCA, and container security tools
  • Perform vulnerability analysis, root cause investigation, and remediation validation
  • Assess AI and LLM applications for security vulnerabilities and misuse scenarios
  • Evaluate AI deployment architectures and recommend security controls
  • Integrate security controls into CI/CD pipelines and deployment workflows
  • Automate security validation, reporting, and vulnerability workflows using Python
  • Perform Azure cloud security assessments
  • Review Kubernetes and containerized workloads for security risks
  • Prioritize vulnerabilities based on exploitability, business risk, and operational impact
  • Track security findings through closure and verify remediation effectiveness
  • Support security governance, compliance, and audit activities
  • Work with development, DevOps, architecture, and product teams on security best practices
  • Provide guidance on secure coding and vulnerability remediation
  • Mentor engineering teams on security-first development practices

Nice to have

  • CISSP
  • CSSLP
  • Microsoft Azure Security Engineer (AZ-500)
  • Certified DevSecOps Professional
  • Azure or AWS Cloud Security certifications
Apply About employer
More about this job

Responsibilities

Conduct security assessments, penetration tests, and secure code reviews across web, API, mobile, cloud-native, and AI-powered applications, and investigate and validate vulnerabilities. Integrate and automate security controls in CI/CD workflows, assess Azure and Kubernetes environments, guide remediation, and support security governance and engineering teams.

Requirements

Requires 6 or more years of experience in application security, DevSecOps, offensive security, or security engineering, with hands-on penetration testing and expertise in SAST, DAST, secure code review, and vulnerability management. Candidates should also bring AI/LLM security, Python automation, Azure, Kubernetes and container security experience, and a bachelor's or master's degree in a related discipline; two or three relevant security or cloud security certifications are specified.

Skills

  • Application Security
  • DevSecOps
  • Offensive Security
  • Penetration Testing
  • Secure Code Review
  • Vulnerability Management
  • AI/LLM Security
  • Python
  • Azure Cloud Security
  • Kubernetes Security
  • Container Security
  • SAST
  • DAST
  • Software Composition Analysis
  • Threat Modeling
  • Security Automation

Visa sponsorship

Not detected in the job text

Categories

  • Security & Safety
  • Technology
  • Software
  • Engineering

Keywords

  • Application Security
  • DevSecOps
  • Offensive Security
  • Security Engineering
  • SAST
  • DAST
  • Secure Code Review
  • Vulnerability Management
  • Penetration Testing
  • AI/LLM Security
  • Prompt Injection
  • Jailbreak Testing
  • SDLC
  • SSDLC
  • MLOps
  • Python
  • Azure
  • Kubernetes
  • Container Security
  • Container Image Analysis
  • Software Composition Analysis
  • Open-Source Security
  • GitHub Security Controls
  • Threat Modeling
  • Risk Assessment
  • CI/CD
  • CISSP
  • CSSLP
  • AZ-500
  • Certified DevSecOps Professional

Report this job