Security Engineer

Job Title: Security Engineer (DevSecOps / Cloud)

Location: Remote

Duration: 6-Month Contract (Full-Time – 37.5 hours/week, Exclusive)

Clearance: Secret or Top-Secret (Mandatory)

Role Overview

We are seeking a skilled Security Engineer to support a Government of Canada (GOC) client in delivering secure cloud-based applications. This role focuses on embedding security into the software development lifecycle, with a strong emphasis on CI/CD security, automated controls, and compliance with federal security standards.

The ideal candidate will have hands-on experience with Security Assessment & Authorization (SA&A) processes within the GOC environment and a strong background in DevSecOps practices.

Key Responsibilities

• Design and implement secure CI/CD pipelines with integrated security controls

• Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security, etc.)

• Lead and support Security Assessment & Authorization (SA&A) activities for cloud-based applications

• Ensure compliance with Government of Canada security frameworks, policies, and standards

• Identify, assess, and remediate application and infrastructure vulnerabilities

• Apply modern security engineering practices across the SDLC

• Collaborate with development and DevOps teams to embed DevSecOps best practices

• Support threat modeling, risk assessments, and security reviews for new and existing systems

Mandatory Requirements

• Bachelor ’ s degree or College Diploma in a relevant discipline

• Minimum 5+ years of experience in a software development / engineering environment

• Strong hands-on experience with CI/CD pipelines and DevSecOps practices

• Proven experience completing Security Assessment & Authorization (SA&A) for at least two (2) cloud-based applications within the last 5 years ( GOC experience required )

• Minimum 2+ years of recent experience implementing automated security scanning and controls within CI/CD pipelines

• Experience applying modern application security principles to applications released within the past 3 years

• Active Secret or Top-Secret Clearance (Mandatory)

Additional Requirements

• Prior experience working within Government of Canada (GOC) environments

• Strong knowledge of cloud security, risk management, and compliance frameworks

• Ability to commit to a full-time (37.5 hours/week), exclusive contract

• Strong communication and stakeholder collaboration skills

Nice to Have

• Certifications such as CISSP, CISM, CEH, AWS/Azure Security

• Experience with Infrastructure as Code (IaC) and secure configuration management

• Familiarity with containerization and Kubernetes security

• Experience with security tools like SonarQube, Snyk, Checkmarx, Prisma Cloud , etc.