Find work in Canada.

331,155 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Save this search

Added 2 days ago
Python Software Development Specialist
Ztek Consulting
Montreal, QC
$120,000 to $130,000 CAD / year
Full-time
Job Role: Python Software Development Specialist
Spécialiste en développement de logiciel / Software Development Specialist
Eaton Corporation
Brossard, QC
Full-time
Eaton's Electrical Sector Energy Control Systems (ECS) Center of Excellence (CoE) is currently seeking a motivated Software Development Specialist to join its global, multidisciplinary team…
Staff Software Development QA Specialist
Fortinet
Burnaby, BC
Full-time
As a Staff Software Development QA Engineer, you will be responsible for ensuring the functionality, reliability, performance, and overall quality of our products through a variety of…
Specialist Technology Information System (TIS) Software Product Development
Enbridge
Calgary, AB
Full-time
…driving financial excellence and innovation. We are seeking a Specialist Technology Information System (TIS) Software Product Development to join our Calgary based…
ISE Software DevOps and Testing Specialist
GeoSpectrum Technologies, Inc
Port Coquitlam, BC
Full-time
The Software DevOps and Testing Specialist is responsible for the development, testing, integration, deployment, and maintenance of software systems supporting GeoSpectrum Technologies' and…
Added 1 day ago
Child Development Specialist
Government of Manitoba
Winnipeg, MB
Full-time
The Department of Families is seeking two qualified candidates to fill Child Development Specialist positions located in Winnipeg, MB. The Child Development Specialist is an integral part…
Spécialiste des logiciels/ Software Specialist
Textron
Mirabel, QC
Full-time
Development Security Specialist (Industrial Oil & Gas Applications)
Pengcorp Ltd.
Calgary, AB
Full-time
Role: Development Security Specialist (DevSecOps)
Software Specialist - Avionics (DO-178C)
MANNARINO
Montreal, QC
Full-time
Participate in the full software development lifecycle for safety-critical avionics systems.
Added 1 day ago
Lead Generation & Business Development Specialist
Rise Tech Rawalpindi
Welland, ON · Niagara College, ON
Full-time
RISETech is a software and AI development company providing AI/ML, web, mobile, and custom software solutions to international clients. We are looking for a proactive person who can help us…
Child Development Specialist
Allies for Every Child
Montreal, QC · Urban agglomeration of Montreal, QC
Full-time
The Child Development Specialist works under the supervision of the Director of Early Care and Education and with the guidance of the Head of Educational Excellence. The Child Development…
Software Development Manager
Novarc Technologies Inc.
Burnaby, BC
$180,000 to $200,000 CAD / year
Full-time
Summary: As the Software Engineering Manager at Novarc Technology, you will lead the software development team in designing, building, and optimizing software solutions for our advanced…
Software Development Manager
Novarc Technologies Inc
Burnaby, British Columbia
$180,000 to $200,000 CAD / year
Full-time
Summary: As the Software Engineering Manager at Novarc Technology, you will lead the software development team in designing, building, and optimizing software solutions for our advanced…
Specialist - Software Engineering
LTM
Ontario · Ontario, Canada
$90,788 to $103,800 USD / year
Full-time
Job Title: Specialist - Software Engineering (Java Backend Engineer)
Intermediate Integrated Software Specialist
RidgeTech Automation
Cambridge, ON
Full-time
RidgeTech Automation is looking for an Integrated Software Specialist to join our talented and dedicated Integrated Software (IS) team. This opportunity will be integral to client solutions…
Project Consultant Software Specialist
Mace
Toronto, ON
Full-time
The Project: The role of a Project Consultant Digital Software Specialist is to provide technical product expertise related to construction software solutions, awareness of solutions in the…
Project Consultant Software Specialist
Mace
Toronto, ON
Full-time
The Project: The role of a Project Consultant Digital Software Specialist is to provide technical product expertise related to construction software solutions, awareness of solutions in the…
SOFTWARE ENGINEERING SPECIALIST – FULLSTACK
BDC
Montreal, QC
Full-time
Reporting to the Chapter Lead, Application Services, the Software Engineering Specialist is an integrated role as part of the application solutions development team. The Specialist…
26-114 - Grants and Capacity Development Specialist
Metis Nation British Columbia
Cranbrook, British Columbia · Fort St. John, British Columbia · Nanaimo, British Columbia · Prince George, British Columbia · Surrey, British Columbia · Terrace, British Columbia · British Columbia
Full-time
The Grants and Capacity Development Specialist at Métis Nation British Columbia (MNBC) is an essential role responsible for supporting in strategically identifying, securing, and managing…
Learning & Development Specialist
International Financial Data Services (IFDS)
Toronto, ON
Full-time
The Learning & Development Specialist is primarily responsible for the development and delivery of comprehensive training programs for Business Operation staff, including Processing and…
Learning & Talent Development Specialist
IKO North America
Mississauga, ON
Full-time
Reporting to the Manager, Learning & Talent Development, the Learning & Talent Development Specialist plays a critical role in supporting employee growth, building leadership capability,…
Jr. Business Development Specialist
Northstar Access
Toronto, ON
Full-time
Northstar is currently looking for a Jr. Business Development Specialist to join our Sales and Business Development team. This position is in Toronto ON and reports to the National Director…
Business Development Specialist (Salary + Sales Commission)
Senior Helpers
Surrey, BC
$50,000 to $70,000 CAD / year
Full-time
This job description outlines the Business Development Specialist objective, primary responsibilities, and/or requirements and qualifications.
State Program Administrator Senior- Parks and Trails Development Specialist
Minnesota Direct Care and Treatment
Saint-Paul, NB · St.-Paul, NB
Full-time
Working Title: Parks and Trails Development Specialist
Senior Learning and Development Specialist
Government of Alberta
Calgary, Alberta
Job Title: Senior Learning and Development Specialist

Pengcorp Ltd.

Development Security Specialist (Industrial Oil & Gas Applications)

Calgary, AB, Canada

Job type: Full-time
Apply by: Sep 20, 2026

Apply About employer

Applications open in a new tab.

At a glance

Automatically prepared from the listing. Check the original description for the full requirements.

Jump to the original description

Responsibilities

Establish and operationalize a Secure Software Development Lifecycle (SSDLC) across enterprise, cloud, and operational technology (OT) applications. Lead security automation, threat modeling, and vulnerability management to ensure security is embedded from design through production.

Requirements

Requires a Bachelor's degree and 5+ years of experience in software development or cybersecurity, with at least 3 years specifically in industrial or OT environments. Proficiency in cloud platforms, CI/CD pipelines, and industrial cybersecurity standards like IEC 62443 is essential.

Experience

5 to 10 years

Education

bachelor degree

Working hours

40 hours per week

Work arrangement

Hybrid

Skills

DevSecOps
Secure SDLC
Threat Modeling
Vulnerability Management
Industrial Cybersecurity
Cloud Security
CI/CD Security
SAST/DAST/SCA
OT/IT Convergence
Infrastructure as Code
Container Security
API Security
Network Segmentation
Zero Trust
Risk Management
Incident Response

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
SSDLC
IEC 62443
NIST CSF
NIST SP 800-82
ISO 27001
Azure DevOps
GitHub Actions
Jenkins
GitLab
Python
PowerShell
Bash
C#
JavaScript
Microsoft Azure
AWS
GCP
Docker
Kubernetes
Terraform
Ansible
SCADA
PLC
OPC UA
Modbus
DNP3
OWASP Top 10
CISSP
OSCP

Original job description

Role: Development Security Specialist (DevSecOps)

Reports To: Manager, Application & Software Development

Department: Digitization

Position Type: Full Term

Location: Calgary, Alberta (Hybrid)

Position Overview

We are seeking a Senior Application Security & DevSecOps Engineer to establish, operationalize, and continuously improve our Secure Software Development Lifecycle (SSDLC) across enterprise, mobile, cloud, and OT-integrated applications.

This role will serve as the bridge between Software Development, DevOps, Infrastructure, and Operational Technology (OT) teams, ensuring that security is embedded into products, platforms, deployment pipelines, and operational processes from design through production.

The successful candidate will own application security strategy, security automation, vulnerability management, threat modeling, secure architecture reviews, and security governance while enabling fast and reliable product delivery.

Key Responsibilities

Application Security

Lead the integration of security requirements and controls throughout all phases of the Secure Software Development Lifecycle (SSDLC).
Conduct application security assessments, architecture reviews, and threat modeling for new applications, APIs, mobile solutions, and major product enhancements.
Perform secure code reviews and identify security vulnerabilities, insecure coding practices, and design weaknesses.
Establish and maintain secure coding standards, application security guidelines, and remediation best practices.
Lead security design reviews for enterprise, cloud-native, mobile, and OT-integrated applications.
Collaborate with development teams to embed security-by-design principles into software architecture and development practices.
Manage application vulnerability assessment and remediation processes, including risk prioritization and validation of corrective actions.
Coordinate internal and external penetration testing activities and support remediation planning.
Ensure secure integration between enterprise applications, mobile platforms, cloud services, and Operational Technology (OT) environments.
Support customer security assessments, audits, and compliance initiatives related to application security.

DevSecOps

Design, implement, and continuously improve security controls within CI/CD pipelines in collaboration with DevOps teams.
Automate security testing, code scanning, vulnerability detection, and compliance validation throughout the software delivery process.
Implement and maintain:
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Software Composition Analysis (SCA)
Infrastructure as Code (IaC) scanning
Secret scanning
Container security scanning
Develop and enforce secure deployment standards for cloud, on-premises, and hybrid environments.
Implement security quality gates and release criteria within deployment pipelines.
Manage and govern secrets, encryption keys, certificates, privileged access controls, and secure credential management practices.
Partner with DevOps teams to strengthen cloud security posture, container security, infrastructure security, and platform hardening.
Develop security dashboards, metrics, and reporting to measure security coverage, vulnerability trends, and risk reduction.
Continuously evaluate and improve DevSecOps tooling, automation, and security processes across the organization.
Provide security guidance during platform modernization, cloud migrations, and implementation of emerging technologies.

Penetration Testing

Conduct and coordinate:

Web application and API security testing to identify and remediate vulnerabilities.
Cloud, container, and Kubernetes security assessments to evaluate risks and security controls.
Annual third-party penetration testing, including remediation tracking and validation of findings.

Industrial Cybersecurity Responsibilities

Design and maintain cybersecurity controls protecting Oil & Gas operational applications.
Implement security architectures aligned with:
IEC 62443
NIST Cybersecurity Framework (CSF)
NIST SP 800-82
ISA/IEC Industrial Automation Security Standards
ISO 27001
Support cybersecurity risk assessments for industrial applications and supporting infrastructure.
Develop secure interfaces between SCADA systems, historians, PLCs, RTUs, IIoT devices, and enterprise applications.
Identify and mitigate cybersecurity threats affecting industrial operations.
Implement segmentation strategies between IT and OT environments.
Assist in the deployment and maintenance of Zero Trust security principles across industrial systems.
Conduct threat modeling for critical operational applications.

Vulnerability Management & Security Monitoring

Perform regular vulnerability assessments and remediation tracking.
Analyze application and infrastructure security findings.
Coordinate security patch management activities.
Monitor security events using SIEM and security monitoring platforms.
Investigate cybersecurity incidents affecting development environments and industrial applications.
Participate in incident response exercises and post-incident reviews.
Develop automated security alerting and compliance reporting.
Cloud & Infrastructure Security
Secure AWS, Azure, or private cloud infrastructures hosting industrial applications.
Implement infrastructure hardening standards.
Manage container security for Docker and Kubernetes environments.
Establish secure network architectures including firewalls, VPNs, reverse proxies, and micro-segmentation.
Secure APIs and application integrations.
Governance, Risk & Compliance
Support audits and compliance activities.
Maintain cybersecurity policies, standards, and procedures.
Document security architectures, risk assessments, and remediation plans.
Ensure compliance with customer, industry, and regulatory cybersecurity requirements.
Track cybersecurity KPIs and risk metrics.

Required Qualifications

Education

Bachelor's Degree in:
Computer Science
Software Engineering
Cybersecurity
Computer Engineering
Related Technical Field

Experience

5+ years of software development, DevOps, cybersecurity, or DevSecOps experience.
3+ years securing industrial, operational technology (OT), or critical infrastructure systems.
Experience supporting Oil & Gas, Energy, Utilities, Manufacturing, or Industrial Automation environments.
Experience securing cloud-based applications.
Experience with Azure DevOps, GitHub, or GitLab pipelines.
Strong understanding of:
OWASP Top 10
API Security
Identity and Access Management
Secure SDLC
Threat Modeling
CI/CD Security

Technical Skills

CI/CD Platforms:
Azure DevOps
GitHub Actions
Jenkins
GitLab CI/CD
Programming & Scripting:
Python
PowerShell
Bash
C#
JavaScript
Cloud Platforms:
Microsoft Azure
AWS
Google Cloud Platform (GCP)
Security Tools:
Microsoft Defender Suite
CrowdStrike
Qualys
Tenable
SonarQube
Checkmarx
Veracode
Snyk
Containers & Infrastructure:
Docker
Kubernetes
Terraform
Ansible
OT Technologies:
SCADA Systems
PLCs
Historians
OPC UA
Modbus
DNP3
Industrial Networks

Preferred Certifications

OSCP (Offsec Certified Professional)
CCSK (Certificate of Cloud Security Knowledge)
CISSP (Certified Information Systems Security Professional)
GICSP (Global Industrial Cyber Security Professional)
CSSLP (Certified Secure Software Lifecycle Professional)
CISM (Certified Information Security Manager)
Certified Kubernetes Security Specialist (CKS)
Microsoft Cybersecurity Architect Expert
AZ-500 or similar
Azure Security Engineer Associate
GIAC Industrial Cyber Security Certifications
ISA/IEC 62443 Cybersecurity Certificate

Key Competencies

Secure Software Development
Industrial Cybersecurity
DevSecOps Automation
Risk Management
Threat Modeling
Incident Response
Vulnerability Management
Cloud Security
OT/IT Convergence Security
Analytical Problem Solving
Communication and Collaboration

Success Measures

The successful candidate will:
Reduce application security vulnerabilities and remediation times.
Improve security automation coverage across CI/CD pipelines.
Maintain compliance with industrial cybersecurity standards.
Successfully secure critical Oil & Gas operational applications.
Minimize cybersecurity risk to production and operational environments.
Enhance resilience against cyber threats targeting industrial operations.

Typical Applications Protected

Production Management Systems
Pipeline Monitoring Applications
Asset Integrity Platforms
Predictive Maintenance Systems
SCADA and HMI Interfaces
Digital Oilfield Applications
Field Data Collection Systems
Emissions Monitoring Applications
Industrial IoT Platforms
Operational Analytics and Reporting Systems

This role is critical to ensuring that industrial software applications remain secure, reliable, and resilient while supporting safe and efficient Oil & Gas operations.

Apply About employer

Report this job