Find work in Canada.

529,839 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 6 mins ago
TG
Senior Network Engineer
TMX Group
Toronto, ON
- Full-time
Scripting: Any scripting experience (Python, Ansible, or Terraform).
Added 20 mins ago
S
Data & AI Engineer - Real World Data and Healthcare Intelligence
Sanofi
Toronto, ON
- Full-time
…(Kubernetes, Argo, Red Hat OpenShift), Infrastructure as code (Terraform), Monitoring and Logging (CloudWatch, Grafana), CI/CD Pipelines (JFrog Artifactory), Scripting and automation…
Added 51 mins ago
Director, Network & Security AI and Automation
The Canada Life Assurance Company
Winnipeg, MB · London, ON · Toronto, ON
Practical experience with Infrastructure as Code and configuration automation tools such as Terraform and Ansible, scripting or development languages such as Python or PowerShell, and…
Added 2 hours ago
Senior Engineering Specialist
The Canada Life Assurance Company
London, ON · Toronto, ON
Provision and configure cloud infrastructure using Terraform and Infrastructure as Code practices
Added 3 hours ago
E
DevOps - Spécialiste Solution / DevOps - Solution Engineer
EXFO
Montreal, QC · Quebec, QC
- Full-time
Added 3 hours ago
T
Software Engineer II - Online & Mobile Backend Developer
TD
London, ON · Toronto, ON
- Full-time
Adhere to developer expectations defined by the team to ensure high-quality, re-usable, and maintainable software, including unit testing, code reviews, and documentation
Added 3 hours ago
A
Tech Lead and .NET Developer
Alithya
QC · QC, Canada
- Full-time
Expérience avec SonarQube et des outils d’observabilité comme Splunk, Dynatrace ou Application Insights, ainsi qu’avec Terraform ou d’autres outils d’infrastructure sous forme de code;
Added 3 hours ago
L
Applied AI Engineer
Luxoft
Canada
- Full-time
Added 3 hours ago
E
DevOps - Spécialiste Solution / DevOps - Solution Engineer
EXFO
Montreal, QC
- Full-time
Added 4 hours ago
E
DevOps - Spécialiste Solution / DevOps - Solution Engineer
EXFO
Montreal, QC · Quebec, QC
- Full-time
Added 4 hours ago
V
DevOps Engineer
VySystems
Toronto, ON
- Contract
Good to have: DataHub, Terraform, SonarQube, and self-service developer portal integrations.
Added 4 hours ago
P
Senior Data Developer
Plusgrade
Montreal, QC · CAN - Montreal
- Full-time
Python · SQL · Java · Scala · Snowflake · Airflow · Dagster · Kafka · Kinesis · AWS (S3, Glue, Lambda) · Terraform · Docker · Kubernetes
Added 5 hours ago
NS
Senior Identity and Reliability Engineering Specialist – Ping Identity / ForgeRock
N2P Systems
Montreal, QC
- $120,000 to $130,000 CAD / year
- Full-time
Experience with infrastructure as code and automation tools such as Terraform and Ansible.
Added 5 hours ago
C
Sr. Consultant, Data Platform DevOps
CIBC
Toronto, ON
- Full-time
…provisioning, configuration, and monitoring. Develop and implement terraform to manage infrastructure as code. Monitor system health, troubleshoot issues, and implement proactive measures…
Added 6 hours ago
TG
Senior Network Engineer
TMX Group
Toronto, ON
- Full-time
Scripting: Any scripting experience (Python, Ansible, or Terraform).
Added 9 hours ago
N
Senior Security Developer
nesto
Canada
- Full-time
We are looking for a Cloud Security Developer to join our dynamic team. In this role, you will play a critical role in designing, implementing, and maintaining cloud security solutions to…
Added 9 hours ago
N
Senior Security Developer
nesto
Canada
- Full-time
We are looking for a Senior Security Developer to join our dynamic team. In this role, you will play a critical role in designing, implementing, and maintaining cloud security solutions to…
Added 12 hours ago
AI
GCP Architect
AllianceIT Inc
Canada
- Contract
Familiarity with Infrastructure-as-Code (Terraform preferred) and CI/CD orchestration (Harnesspreferred, or equivalent), sufficient to guide - not necessarily implement - the…
Added 21 hours ago
M
IT Cyber Security Consultant -L3
Microserve
BC · British Columbia, Canada
- Contract
Experience with Infrastructure as Code technologies, including Terraform, Bicep, ARM templates, or similar tools.
Added 22 hours ago
R
Software Developer
Raise
Calgary, AB
- Full-time
DevOps / CI/CD Certifications: Certified Kubernetes Application Developer (CKAD) or HashiCorp Certified: Terraform Associate.
Added 23 hours ago
O
Manager, Software Development
OpenText
Richmond Hill, ON
- Full-time
Added 1 day ago
VS
Java AWS Developer|| CALGARY, CN (Onsite)
Verito Solutions Inc
Calgary, AB
- Contract
The Intermediate AWS Developer supports the delivery of cloud‑native and serverless solutions within enterprise client environments. This role contributes to consulting engagements by…
Added 1 day ago
RI
Senior Full Stack Engineer
Remarcable, Inc.
Remote, Canada
- $140,000 to $190,000 CAD / year
- Full-time
- Remote
Experience with containerization (Docker) and modern cloud infrastructure/CI/CD pipelines (AWS, Azure, Terraform).
Added 1 day ago
IT Infrastructure Systems Specialist
Human Resources Department - NRT Technology Corp.
Toronto, ON
Added 1 day ago
W
Software Engineer I
Wayfair
Toronto, ON
- $120,000 to $130,000 CAD / year
- Full-time
…Rust) and frameworks (Backstage, Buildkite, SonarQube, Puppet, Terraform and…

Microserve

IT Cyber Security Consultant -L3

BC, Canada
British Columbia, Canada, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: Nov 27, 2026
Posting language: English
Posted: Oct 28, 2026

Original job description

IT Cyber Security Consultant -L3 (12 month contract)

Location: Burnaby, BC / Hybrid

Staffing Placement Opportunity

General Description

The IT Cybersecurity Consultant – Level 3 is responsible for strengthening application security and DevSecOps practices by identifying, assessing, mitigating, and documenting cybersecurity risks. The role focuses on improving application security testing maturity, implementing security controls throughout the software development lifecycle, and ensuring that applications, development pipelines, and cloud environments align with established security standards and best practices.

The consultant works closely with application development teams, cybersecurity specialists, DevOps engineers, platform owners, and other stakeholders to implement automated security testing, improve vulnerability management, establish repeatable security practices, and support the continuous improvement of application security capabilities.

Experience And Role Accountabilities

Identify and assess application security risks and vulnerabilities through security testing, vulnerability assessments, code analysis, and collaboration with technical teams and stakeholders.
Implement and maintain application security testing capabilities using GitHub Enterprise and GitHub Advanced Security, including CodeQL, static application security testing (SAST), software composition analysis (SCA), secret scanning, dependency review, and vulnerability remediation workflows.
Integrate automated security controls into GitHub Actions and Azure DevOps pipelines, incorporating security checks into pull requests, builds, and release workflows.
Analyze security findings, assess potential business and technical impacts, prioritize remediation based on risk, and recommend practical solutions to reduce exposure.
Support the design, implementation, and continuous improvement of secure software development lifecycle (SDLC) practices, including application security testing, threat modeling, vulnerability management, and software supply chain security.
Implement and support security scanning for Infrastructure as Code (IaC) and related development and deployment processes.
Review and troubleshoot application code, scripts, pipeline definitions, and YAML-based workflows to identify security weaknesses and resolve technical issues.
Develop and maintain application security standards, governance frameworks, operating procedures, testing requirements, and onboarding practices to promote consistent security implementation across development teams.
Establish and maintain security metrics, reporting processes, and remediation tracking to measure application security coverage, identify gaps, and support continuous improvement.
Collaborate with application teams, cybersecurity teams, platform owners, vendors, contractors, and senior stakeholders to define security requirements, evaluate technical options, and implement appropriate security controls.
Provide technical guidance and coaching to development and DevOps teams on secure coding, security testing tools, vulnerability remediation, and DevSecOps best practices.
Support the implementation and adoption of application security capabilities by coordinating knowledge transfer, documenting technical processes, and enabling internal teams to maintain and operate implemented solutions.
Communicate security risks, assessment results, remediation recommendations, and implementation decisions clearly to both technical and non-technical audiences.

Education And Skills

University or college degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field. An equivalent combination of education and relevant experience may be considered.
Minimum of seven (7) years of relevant experience in software engineering, DevSecOps, application security, cloud security, or closely related areas, including at least three (3) years of hands-on DevSecOps or application security engineering experience.
Demonstrated hands-on experience implementing GitHub Enterprise and GitHub Advanced Security in a production or large enterprise environment.
Strong technical experience with CodeQL, SAST, SCA, secret scanning, dependency review, and vulnerability remediation workflows.
Hands-on experience integrating security controls into GitHub Actions and Azure DevOps pipelines.
Experience with Infrastructure as Code and associated security scanning tools and practices.
Software development, scripting, or automation experience, with the ability to review and troubleshoot code, scripts, pipeline definitions, and YAML-based workflows.
Working knowledge of secure SDLC practices, OWASP application security principles, software supply chain security, threat modeling, vulnerability management, and risk-based remediation.
Experience developing repeatable application security standards, governance practices, operating procedures, security metrics, and onboarding processes.
Strong analytical, problem-solving, communication, and stakeholder management skills.
Proven ability to collaborate across technical teams and communicate cybersecurity risks and recommendations effectively.
Demonstrated ability to coach internal resources, facilitate knowledge transfer, and support the sustainable adoption of security practices.

Nice-to-Have Qualifications

Experience with Infrastructure as Code technologies, including Terraform, Bicep, ARM templates, or similar tools.
Relevant certifications, such as:
- GIAC Cloud Security Automation (GCSA)
- GIAC Cloud Security Essentials (GCLD)
- GIAC Public Cloud Security (GPCS)
- GitHub Advanced Security (GH-500)
- Microsoft Certified: DevOps Engineer Expert (AZ-400)
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Terms and Conditions

Contract resource supporting an Application Security Testing (AppSec) Maturity and Improvement Program.
The consultant is expected to support the implementation, standardization, and continuous improvement of application security testing and DevSecOps capabilities, with an emphasis on automation, governance, vulnerability remediation, and knowledge transfer.

Note: this is an opportunity with a Microserve client.

Apply About employer

More about this job

Responsibilities

Implement and improve application security testing and DevSecOps capabilities, integrating automated security controls into development pipelines and supporting vulnerability assessment and remediation. Establish repeatable security standards, governance, metrics, and knowledge-transfer practices while advising and coaching development and platform teams.

Requirements

Requires a degree in computer science, software engineering, information technology, cybersecurity, or a related field, or equivalent education and experience, plus at least seven years of relevant experience including three years in hands-on DevSecOps or application security engineering. Candidates need production or enterprise experience with GitHub Enterprise and GitHub Advanced Security, security testing tools, CI/CD pipelines, IaC scanning, secure SDLC practices, and effective stakeholder communication.

Skills

Application Security
DevSecOps
GitHub Enterprise
GitHub Advanced Security
CodeQL
Static Application Security Testing
Software Composition Analysis
GitHub Actions
Azure DevOps
Infrastructure as Code
Secure SDLC
Threat Modeling
Vulnerability Management
Software Supply Chain Security
Risk-Based Remediation
Security Metrics

Visa sponsorship

Not detected in the job text

Keywords

Application Security
DevSecOps
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
Dependency Review
GitHub Actions
Azure DevOps
Infrastructure as Code
Terraform
Bicep
ARM Templates
Secure SDLC
OWASP
Threat Modeling
Vulnerability Management
Software Supply Chain Security
Cloud Security
YAML
GCSA
GCLD
GPCS
GH-500
AZ-400
AZ-500

Report this job