Jobs in Canada

Email me new jobs Save this search

Added 2 days ago
Y
Sales Engineer - Upstream
Yokogawa
NB · Chiasson Office, NB
- Full-time
…proposal/estimation making, the selling of which requires a technical background equivalent to a baccalaureate degree in…
Added 2 days ago
BT
Standards and Training Specialist
Baker Tilly Canada
Peterborough, ON
- Full-time
This is a dynamic and collaborative position that blends technical accounting knowledge with a passion for people development. The successful candidate will help design and deliver…
Added 2 days ago
NB
Associate Director, Execution, National Client Group
National Bank of Canada
Toronto, ON
- Full-time
Provide mentorship, guidance and technical support to Analysts and Associates on underwriting, portfolio management and transaction execution best practices.
Added 2 days ago
BT
Senior Accountant - Cross Border Tax
Baker Tilly Canada
Toronto, ON
- Full-time
We are looking for a Senior Accountant – Cross Border Tax to join our team - a role where your expertise will drive meaningful outcomes and your ambition will help shape what comes next.…
Added 2 days ago
A
Senior System Analyst - Payments
Acumatica
Montreal, QC
- Full-time
…in today’s digital economy. Our industry-specific business management solution is engineered to address real-world needs - featuring intelligent workflows and market-leading usability that…
Added 2 days ago
A
Senior System Analyst - Payments
Acumatica
Montreal, QC
- Full-time
…in today’s digital economy. Our industry-specific business management solution is engineered to address real-world needs - featuring intelligent workflows and market-leading usability that…
Added 2 days ago
CC
Student, Geology
Cameco Corporation
SK · Saskatchewan, Canada
- Full-time
…operational activities at the. mine site, including data and database management, daily production monitoring, geological and geotechnical drill core logging, sampling and downhole probing,…
Added 2 days ago
CC
Student, Structural Integrity Engineering
Cameco Corporation
Saskatoon, SK
- Full-time
Reporting to the senior structural integrity engineer, you will support structural integrity activities across Cameco’s operations while gaining practical experience in reliability and…
Added 2 days ago
C
Senior Identity Security Engineer
CPKC
Calgary, AB
- Full-time
As a Senior Specialist, Enterprise Security, you will be at the forefront of the organization's identity security strategy, helping protect critical systems through advanced CyberArk…
Added 2 days ago
CC
Student, Control Systems Engineer
Cameco Corporation
SK · Saskatchewan, Canada
- Full-time
Working at Cameco’s Key Lake mill and reporting to the senior process controls engineer, you will gain hands-on experience supporting industrial process control systems, including system…
Added 2 days ago
CG
Director of Strategic Partnerships
CDC Global Solutions
Toronto, ON
- $180,000 to $210,000 CAD / year
- Full-time
Lead all client communications: progress updates, technical readouts, steering discussions, and escalation management.
Added 2 days ago
CC
Student, Engineer Operational Technology
Cameco Corporation
Saskatoon, SK
- Full-time
Assist with preparation of project management plans and technical documentation.
Added 2 days ago
C
Senior Manager, Complex Accounting-EN
CAE
Montreal, QC
- Full-time
As the Senior Manager of the Complex Accounting team, you will play a strategic role within the finance organization. You will act as an expert for management and business units on the…
Added 2 days ago
Coating Sr Researcher
Tenaris
Toronto, ON
The Coating Senior Researcher supports technical/technological and expert advice on coating, while executing research, development and projects.
Added 2 days ago
S
Director Technology Transformation Stores
Sobeys
Stellarton, NS
- Full-time
Industry knowledge and technical expertise; knowledgeable on product life cycle and SDLC; Familiar with Project Management, Agile, Scrum, Waterfall, etc. methodologies.
Added 2 days ago
WI
Senior Project Manager - Mining Consulting (Sudbury)
WSP in Canada
Sudbury, ON · Greater Sudbury, ON
- Full-time
Coordinate discipline leads and hold teams accountable for scope, quality, cost, schedule, change management, interdisciplinary integration, and required technical reviews and approvals.
Added 2 days ago
WI
Senior Project Manager - Mining Consulting (Sudbury)
WSP in Canada
Sudbury, ON · Greater Sudbury, ON
- Full-time
Coordinate discipline leads and hold teams accountable for scope, quality, cost, schedule, change management, interdisciplinary integration, and required technical reviews and approvals.
Added 2 days ago
BB
Senior Technician - Security
Bosch Building Technologies North America
AB · Edmonton, AB
- Full-time
As a Senior Technician - Security with Bosch Building Technologies, you will collaboratively review, understand, analyze, and implement installation blueprints and plans from Project…
Added 2 days ago
RG
Vice-président(e), tarification / VP, Underwriting
Reinsurance Group of America
Toronto, ON · Montreal, QC
- Full-time
Added 2 days ago
TC
Senior DevSecOps and Application Security SME
ThirdEye CyberSecurity
Regina, SK
- Contract
Provide technical guidance on secure SDLC, DevSecOps, threat modeling, secure coding, and application security risk management.
Added 2 days ago
W
Senior Project Manager - Mining Consulting (Sudbury)
WSP
Fredericton, NB
- Full-time
Coordinate discipline leads and hold teams accountable for scope, quality, cost, schedule, change management, interdisciplinary integration, and required technical reviews and approvals.
Added 2 days ago
A
Chef de projet entrée en service / Entry Into Service Project Manager
Airbus
Mirabel, QC · Montreal, QC
- Full-time
Do you have experience in project management, have you worked in the aerospace industry, preferably in a customer service role, and would you like to progress and develop new skills? Then…
Added 2 days ago
M
Client Relationship Management - Lead Specialist
Marsh
Montreal, QC
- Other
Maintain strong relationships with senior level professional counterparts in client organizations as well as individual insured within a sponsored program.
Added 3 days ago
F
Principal Designer- Material Handling
Fluor
Calgary, AB
- Full-time
Operating under detailed instructions and technical guidance from senior engineers, the purpose of this position is to provide the essential technical knowledge and perform the work listed.…
Added 3 days ago
F
Principal Designer - Senior Bulk Material Handling
Fluor
Vancouver, BC
- Full-time
Operating under detailed instructions and review the purpose of this position is to provide the essential technical knowledge and perform the work listed. This role has the responsibility…

ThirdEye CyberSecurity

Senior DevSecOps and Application Security SME

Regina, SK, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: May 3, 2027
Posting language: English
Posted: Nov 4, 2026

Original job description

Senior DevSecOps and Application Security SME

Duration: 10 to 12 months

What you'll do

Provide hands-on DevSecOps and application security expertise for the AppSec Testing Maturity work program.
Configure and optimize GitHub Enterprise and GitHub Advanced Security (GHAS), including CodeQL, code scanning, secret scanning, dependency review, repository rulesets, dashboards, and reporting.
Implement and tune static application security testing (SAST), software composition analysis (SCA), secret scanning, and Infrastructure as Code (IaC) scanning for in-scope repositories and technology stacks.
Integrate security testing into GitHub Actions, Azure DevOps pipelines, pull request workflows, build processes, release gates, and other automated delivery workflows where appropriate.
Create reusable pipeline templates, security configurations, and onboarding patterns that application teams can adopt consistently.
Work with application owners and developers to pilot the controls, validate developer workflows, resolve implementation issues, and support application onboarding.
Define practical processes for vulnerability intake, triage, ownership, prioritization, remediation, exception handling, escalation, verification, and closure.
Configure reporting that shows security-testing coverage, open findings, ownership, severity, aging, remediation status, and exceptions.
Develop application security standards, minimum configuration requirements, implementation guidance, operating procedures, and support documentation.
Assess software supply chain risks involving open-source dependencies, third-party GitHub Actions, build components, and developer tooling.
Provide technical guidance on secure SDLC, DevSecOps, threat modeling, secure coding, and application security risk management.
Collaborate with Cybersecurity, Platform, Applications, Cloud and Infrastructure teams, architecture, change management, application teams, vendors, and the Work Program Manager.
Coach BC Hydro staff and deliver structured knowledge transfer so internal teams can operate and extend the capability after the contract ends.
Provide clear progress updates, document risks and decisions, and contribute to work program deliverables and acceptance evidence.

What you bring

University or College degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field; an equivalent combination of education and relevant experience may be considered.
A minimum of 7 years of relevant experience in software engineering, DevSecOps, application security, cloud security, or closely related work.
A minimum of 3 years of hands-on DevSecOps or application security engineering experience.
Demonstrated hands-on experience implementing GitHub Enterprise and GitHub Advanced Security in a production or large enterprise environment.
Strong experience with CodeQL, SAST, SCA, secret scanning, dependency review, and vulnerability remediation workflows.
Hands-on experience integrating security controls with GitHub Actions and Azure DevOps pipelines.
Experience implementing security checks in pull request, build, and release workflows while balancing security requirements with developer usability.
Experience with Infrastructure as Code and related security scanning. Experience with Terraform, Bicep, ARM templates, or similar technologies is preferred.
A software development or automation background, with the ability to review and troubleshoot code, scripts, pipeline definitions, and YAML-based workflows.
Working knowledge of secure SDLC, OWASP application security practices, software supply chain security, threat modeling, vulnerability management, and risk-based remediation.
Experience designing repeatable application security standards, governance, operating procedures, metrics, and onboarding practices.
Proven ability to work with application teams, cybersecurity teams, platform owners, vendors, contractors, and senior stakeholders.
Clear written and verbal communication skills, including the ability to explain technical risks and decisions to both technical and non-technical audiences.
Demonstrated ability to coach internal resources and complete effective knowledge transfer.
Preferred certifications include:
GIAC Cloud Security Automation (GCSA)
GIAC Cloud Security Essentials (GCLD)
GIAC Public Cloud Security (GPCS)
GitHub Advanced Security (GH-500)
Microsoft Certified: DevOps Engineer Expert (AZ-400)
Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Apply About employer

More about this job

Responsibilities

Implement and optimize GitHub Advanced Security and automated application security controls across repositories, pipelines, pull requests, builds, and releases. Establish security standards, vulnerability workflows, reporting, and onboarding practices while supporting application teams and transferring operational knowledge to internal staff.

Requirements

Requires a degree in a related field or equivalent experience, at least seven years of relevant experience, and at least three years of hands-on DevSecOps or application security engineering. Candidates should have enterprise GitHub Advanced Security experience, strong pipeline and security-scanning expertise, and the ability to guide teams, communicate risks, and deliver knowledge transfer.

Skills

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
GitHub Actions
Azure DevOps
Infrastructure as Code Security
Vulnerability Management
Secure SDLC
Threat Modeling
Software Supply Chain Security
Terraform

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
Dependency Review
GitHub Actions
Azure DevOps
Infrastructure as Code
Terraform
Bicep
ARM Templates
Secure SDLC
OWASP
Software Supply Chain Security
Threat Modeling
Vulnerability Management
Risk-Based Remediation
GIAC Cloud Security Automation
GIAC Cloud Security Essentials
GIAC Public Cloud Security
GitHub Advanced Security Certification
Microsoft Azure Security Engineer Associate

Report this job