Jobs in Canada

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 12 mins ago
R
Project Engineering Manager
Refresco
ON · Mississauga, ON
- Full-time
The Project Engineering Manager will be responsible for moderate to complex project planning and execution for various business opportunities. This corporate position oversees projects…
Added 12 mins ago
AM
Evening Building Concierge
Alliance Maintenance Ltd.
Vancouver, BC
- $19.4 CAD / hour
- Full-time
…welcome and helpful support. This role assists the building manager with daily tasks, answers resident inquiries, and ensures smooth day-to-day…
Added 12 mins ago
FT
Enrollment Services Representative - Appendix D/Temporary Assignment
Fanshawe Toronto@ILAC
London, ON
- Full-time
…performed in an alternate location, without adverse impact to the operations of the College, inclusive of our Student and Staff experience. Confirmation of hybrid work options available to…
Added 12 mins ago
H
Ingénieur / Technicien – Génie industriel
Hitachi
Quebec, QC · (HE)Office_QC, Quebec City
- Full-time
Définir et documenter le travail standardisé et déployer des outils Lean tels que 5S, SMED et Kanban afin de stabiliser les opérations et de réduire le gaspillage.
Added 12 mins ago
E
Content & Channels Manager
Equinix
Toronto, ON
- Full-time
The Manager, Content & Channels is the engine room of that work. This is the role that turns strategy into published content - running the day-to-day content engine, writing and producing…
Added 12 mins ago
A
Agent Methode
Actalent
Montreal, QC
- $36 to $57 CAD / hour
- Contract
…précision dimensionnelle des pièces et au bon fonctionnement des opérations en atelier, en travaillant en étroite collaboration avec plusieurs équipes…
Added 12 mins ago
TM
Senior Manager, Skills Development Programs
Toronto Metropolitan University
Toronto, ON
- Temporary
We’re looking for an innovative and strategic Senior Manager, Skills Development Programs, to join and drive the development, management, and implementation of cybersecurity training…
Added 12 mins ago
A
Agent Methode
Actalent
Longueuil, QC
- $36 to $57 CAD / hour
- Contract
…précision dimensionnelle des pièces et au bon fonctionnement des opérations en atelier, en travaillant en étroite collaboration avec plusieurs équipes…
Added 12 mins ago
A
Agent Methode
Actalent
Laval, QC
- $36 to $57 CAD / hour
- Contract
…précision dimensionnelle des pièces et au bon fonctionnement des opérations en atelier, en travaillant en étroite collaboration avec plusieurs équipes…
Added 12 mins ago
A
Gestionnaire De Projets De Construction
Actalent
Valleyfield, PE
- $60 to $100 CAD / hour
- Contract
Le ou la gestionnaire de projets de construction sera responsable de la gestion de projets de grande envergure sur le site de Valleyfield. Cette personne soutiendra lexécution réussie de…
Added 12 mins ago
A
Project Manager
Actalent
Vaughan, ON
- $95,500 to $140,000 CAD / year
- Full-time
…equipment selection, installation, commissioning, and handover to operations. The Project Manager develops detailed project plans, manages budgets and schedules, coordinates internal and…
Added 12 mins ago
TU
Manager, Student Systems and Insights
The University of British Columbia
Kelowna, BC
- $7,158.42 to $10,292.25 CAD / month
- Full-time
Coordinates project evaluation and transition activities to ensure completed initiatives are appropriately incorporated into ongoing operations.
Added 12 mins ago
A
RESPONSABLE DE LA PLANIFICATION BASELINE (LONG TERME) / BASELINE (LONG TERM) PLANNING MANAGER
Airbus
Montreal, QC
- Full-time
Équilibre vie privée / professionnelle : Une politique de travail hybride (selon les besoins opérationnels), une cafétéria sur site, une politique de congés très concurrentielle.
Added 13 mins ago
E
Global Human Resources Temporary Project Manager-Temporary
Entrust
ON · Canada - Ontario Field
- Full-time
The Temporary Global HR Project Manager will support initiatives focused on employee relations and the employee lifecycle. This role will provide hands-on support to drive priority work,…
Added 13 mins ago
PC
Account Manager
Parkland Corporation
Mississauga, ON
- Full-time
The Account Manager is responsible for driving sales growth, operational excellence, profitability, and brand execution across a designated territory consisting of both Company-Owned Retail…
Added 13 mins ago
PC
Account Manager
Parkland Corporation
Regina, SK
- Full-time
The Account Manager is responsible for driving sales growth, operational excellence, profitability, and brand execution across a designated territory consisting of both Company-Owned Retail…
Added 13 mins ago
Executive Director, Provincial Archivist
Government of Alberta
AB
…communication and marketing initiatives, maintaining viable business operations, and ensuring the branch's financial accountabilities are met, all within a government context. While your…
Added 13 mins ago
G
Deputy Quality Manager
GFT
Toronto, ON
- Full-time
Must possess a driver’s license to fulfill the essential functions of the position
Added 13 mins ago
TR
Technical Lead, Security Platforms (Contract)
Teck Resources Limited
Vancouver, BC · Greater Vancouver, BC
- Full-time
…support. You will build and run the platforms that security operations and other service teams use to deliver security outcomes. Formal people management remains with the Manager; risk…
Added 13 mins ago
S
Business Operations Analyst
Savaria
Surrey, BC
- Full-time
We are seeking a Business Operations Analyst to provide analytical, operational, and project support to the Vice President and other areas of the business.
Added 13 mins ago
C
Project Manager Facilities
CPKC
Calgary, AB
- Full-time
As the Project Manager, Facilities, you will deliver a varied portfolio of facility construction, capital improvement, maintenance, and break-fix projects across CPKC’s Western Canadian…
Added 13 mins ago
MR
Administrator, Technical Services
Mount Royal University
Calgary, AB
- Part-time
The Administrator, Technical Services reports to the General Manager, Theatre and Performance Services and is under the direction of the Lead, Technical Theatre Operations. The…
Added 28 mins ago
Onsite Medical Representative
Amazon
Delta, BC
Must have one of the following:
Added 28 mins ago
A
Concierge Agent
AccorHotel
Lake Louise, AB
- Full-time
Must possess outstanding guest service skills, including professional verbal communication skills · You may be required to work on holidays, weekends, overnights and other non-day shifts
Added 28 mins ago
GH
Water and Wastewater Operator Level II
Groupe Helios
Peterborough, ON
- Full-time
Ensure operations meet the requirements of the Safe Drinking Water Act, O. Reg. 170/03, O. Reg. 128/04, O. Reg. 129/04, the Ontario Water Resources Act and site-specific Environmental…

Closed listing

Pengcorp Ltd.

Development Security Specialist (Industrial Oil & Gas Applications)

Calgary, AB, Canada

Full-time

This opening has closed.

The original listing is kept below for reference.

Find open jobs More jobs with this employer

About employer

Job details

Job type: Full-time
Closing date: Oct 21, 2026
Experience: 5+ years of software development, DevOps, cybersecurity, or DevSecOps experience.
Posting language: English
Posted: Sep 21, 2026

Similar jobs hiring now

Added 4 days ago
Co-op/Intern Engineering Student - Electrical & CADD Specialist (May 2027)
Spartan Controls Ltd. · Calgary, AB, Canada
Added 4 days ago
Co-op/Intern Engineering Student - Electrical Specialist (May 2027)
Spartan Controls Ltd. · Calgary, AB, Canada
Added 4 days ago
Co-op/Intern Engineering Student - Automation Specialist, Configuration & Design (May 2027)
Spartan Controls Ltd. · Calgary, AB, Canada
Added 4 days ago
Co-op/Intern Computer Science or Engineering Student - Data & Software Specialist (May 2027)
Spartan Controls Ltd. · Calgary, AB, Canada

Search current openings

Original job description

Archived listing. The details below describe a past opening.

Role: Development Security Specialist (DevSecOps)

Reports To: Manager, Application & Software Development

Department: Digitization

Position Type: Full Term

Location: Calgary, Alberta (On-Site)

Position Overview

We are seeking a Senior Application Security & DevSecOps Engineer to establish, operationalize, and continuously improve our Secure Software Development Lifecycle (SSDLC) across enterprise, mobile, cloud, and OT-integrated applications.

This role will serve as the bridge between Software Development, DevOps, Infrastructure, and Operational Technology (OT) teams, ensuring that security is embedded into products, platforms, deployment pipelines, and operational processes from design through production.

The successful candidate will own application security strategy, security automation, vulnerability management, threat modeling, secure architecture reviews, and security governance while enabling fast and reliable product delivery.

Key Responsibilities

Application Security

Lead the integration of security requirements and controls throughout all phases of the Secure Software Development Lifecycle (SSDLC).
Conduct application security assessments, architecture reviews, and threat modeling for new applications, APIs, mobile solutions, and major product enhancements.
Perform secure code reviews and identify security vulnerabilities, insecure coding practices, and design weaknesses.
Establish and maintain secure coding standards, application security guidelines, and remediation best practices.
Lead security design reviews for enterprise, cloud-native, mobile, and OT-integrated applications.
Collaborate with development teams to embed security-by-design principles into software architecture and development practices.
Manage application vulnerability assessment and remediation processes, including risk prioritization and validation of corrective actions.
Coordinate internal and external penetration testing activities and support remediation planning.
Ensure secure integration between enterprise applications, mobile platforms, cloud services, and Operational Technology (OT) environments.
Support customer security assessments, audits, and compliance initiatives related to application security.

DevSecOps

Design, implement, and continuously improve security controls within CI/CD pipelines in collaboration with DevOps teams.
Automate security testing, code scanning, vulnerability detection, and compliance validation throughout the software delivery process.
Implement and maintain:
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Software Composition Analysis (SCA)
Infrastructure as Code (IaC) scanning
Secret scanning
Container security scanning
Develop and enforce secure deployment standards for cloud, on-premises, and hybrid environments.
Implement security quality gates and release criteria within deployment pipelines.
Manage and govern secrets, encryption keys, certificates, privileged access controls, and secure credential management practices.
Partner with DevOps teams to strengthen cloud security posture, container security, infrastructure security, and platform hardening.
Develop security dashboards, metrics, and reporting to measure security coverage, vulnerability trends, and risk reduction.
Continuously evaluate and improve DevSecOps tooling, automation, and security processes across the organization.
Provide security guidance during platform modernization, cloud migrations, and implementation of emerging technologies.

Penetration Testing

Conduct and coordinate:

Web application and API security testing to identify and remediate vulnerabilities.
Cloud, container, and Kubernetes security assessments to evaluate risks and security controls.
Annual third-party penetration testing, including remediation tracking and validation of findings.

Industrial Cybersecurity Responsibilities

Design and maintain cybersecurity controls protecting Oil & Gas operational applications.
Implement security architectures aligned with:
IEC 62443
NIST Cybersecurity Framework (CSF)
NIST SP 800-82
ISA/IEC Industrial Automation Security Standards
ISO 27001
Support cybersecurity risk assessments for industrial applications and supporting infrastructure.
Develop secure interfaces between SCADA systems, historians, PLCs, RTUs, IIoT devices, and enterprise applications.
Identify and mitigate cybersecurity threats affecting industrial operations.
Implement segmentation strategies between IT and OT environments.
Assist in the deployment and maintenance of Zero Trust security principles across industrial systems.
Conduct threat modeling for critical operational applications.

Vulnerability Management & Security Monitoring

Perform regular vulnerability assessments and remediation tracking.
Analyze application and infrastructure security findings.
Coordinate security patch management activities.
Monitor security events using SIEM and security monitoring platforms.
Investigate cybersecurity incidents affecting development environments and industrial applications.
Participate in incident response exercises and post-incident reviews.
Develop automated security alerting and compliance reporting.
Cloud & Infrastructure Security
Secure AWS, Azure, or private cloud infrastructures hosting industrial applications.
Implement infrastructure hardening standards.
Manage container security for Docker and Kubernetes environments.
Establish secure network architectures including firewalls, VPNs, reverse proxies, and micro-segmentation.
Secure APIs and application integrations.
Governance, Risk & Compliance
Support audits and compliance activities.
Maintain cybersecurity policies, standards, and procedures.
Document security architectures, risk assessments, and remediation plans.
Ensure compliance with customer, industry, and regulatory cybersecurity requirements.
Track cybersecurity KPIs and risk metrics.

Required Qualifications

Education

Bachelor's Degree in:
Computer Science
Software Engineering
Cybersecurity
Computer Engineering
Related Technical Field

Experience

5+ years of software development, DevOps, cybersecurity, or DevSecOps experience.
3+ years securing industrial, operational technology (OT), or critical infrastructure systems.
Experience supporting Oil & Gas, Energy, Utilities, Manufacturing, or Industrial Automation environments.
Experience securing cloud-based applications.
Experience with Azure DevOps, GitHub, or GitLab pipelines.
Strong understanding of:
OWASP Top 10
API Security
Identity and Access Management
Secure SDLC
Threat Modeling
CI/CD Security

Technical Skills

CI/CD Platforms:
Azure DevOps
GitHub Actions
Jenkins
GitLab CI/CD
Programming & Scripting:
Python
PowerShell
Bash
C#
JavaScript
Cloud Platforms:
Microsoft Azure
AWS
Google Cloud Platform (GCP)
Security Tools:
Microsoft Defender Suite
CrowdStrike
Qualys
Tenable
SonarQube
Checkmarx
Veracode
Snyk
Containers & Infrastructure:
Docker
Kubernetes
Terraform
Ansible
OT Technologies:
SCADA Systems
PLCs
Historians
OPC UA
Modbus
DNP3
Industrial Networks

Preferred Certifications

OSCP (Offsec Certified Professional)
CCSK (Certificate of Cloud Security Knowledge)
CISSP (Certified Information Systems Security Professional)
GICSP (Global Industrial Cyber Security Professional)
CSSLP (Certified Secure Software Lifecycle Professional)
CISM (Certified Information Security Manager)
Certified Kubernetes Security Specialist (CKS)
Microsoft Cybersecurity Architect Expert
AZ-500 or similar
Azure Security Engineer Associate
GIAC Industrial Cyber Security Certifications
ISA/IEC 62443 Cybersecurity Certificate

Key Competencies

Secure Software Development
Industrial Cybersecurity
DevSecOps Automation
Risk Management
Threat Modeling
Incident Response
Vulnerability Management
Cloud Security
OT/IT Convergence Security
Analytical Problem Solving
Communication and Collaboration

Success Measures

The successful candidate will:
Reduce application security vulnerabilities and remediation times.
Improve security automation coverage across CI/CD pipelines.
Maintain compliance with industrial cybersecurity standards.
Successfully secure critical Oil & Gas operational applications.
Minimize cybersecurity risk to production and operational environments.
Enhance resilience against cyber threats targeting industrial operations.

Typical Applications Protected

Production Management Systems
Pipeline Monitoring Applications
Asset Integrity Platforms
Predictive Maintenance Systems
SCADA and HMI Interfaces
Digital Oilfield Applications
Field Data Collection Systems
Emissions Monitoring Applications
Industrial IoT Platforms
Operational Analytics and Reporting Systems

This role is critical to ensuring that industrial software applications remain secure, reliable, and resilient while supporting safe and efficient Oil & Gas operations.

About employer

More about this job

Responsibilities

Establish and operationalize a Secure Software Development Lifecycle (SSDLC) across enterprise, cloud, and Operational Technology (OT) environments. Lead security automation, threat modeling, and vulnerability management to ensure security is embedded from design through production.

Requirements

Requires a Bachelor's degree in a technical field with 5+ years of DevSecOps experience and 3+ years securing industrial or critical infrastructure systems. Proficiency in cloud platforms, CI/CD tools, and industrial cybersecurity standards like IEC 62443 is essential.

Skills

DevSecOps
Secure SDLC
Threat Modeling
Vulnerability Management
Industrial Cybersecurity
Cloud Security
CI/CD Pipeline Security
Penetration Testing
OT/IT Convergence
Infrastructure as Code
Container Security
API Security
Risk Management
Secure Coding Standards
Identity and Access Management
Network Segmentation

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
SSDLC
IEC 62443
NIST CSF
NIST SP 800-82
ISO 27001
SAST
DAST
SCA
Azure DevOps
GitHub Actions
Jenkins
GitLab
Python
PowerShell
C#
Azure
AWS
GCP
Docker
Kubernetes
Terraform
Ansible
SCADA
PLC
OPC UA
Modbus
CISSP
OSCP
GICSP

Report this job

Work requirements

Jobs in Canada