Find work in Canada.

595,614 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 4 hours ago
AG
Field Representative - Alcoholic Beverages
Acosta Group
Toronto, ON · Etobicoke, ON
- Full-time
We recognize our associates are the foundation of our success. That’s why we prioritize your growth, development, and well-being to help you reach your full potential. With programs…
Added 4 hours ago
C
Specialist Product Management
CPKC
Calgary, AB
- Full-time
…accountability, and pride. With opportunities for training, development, and advancement, you’re not just building a career - you’re part of something bigger. Together, we move goods,…
Added 4 hours ago
BB
Senior Technician - Security
Bosch Building Technologies North America
AB · Edmonton, AB
- Full-time
…manner in line with our values of a leadership mindset, people development, team, and client-focused. Though based in Edmonton you may be required to travel to job sites throughout the…
Added 4 hours ago
Assistant Branch Manager (Willoughby Branch)
First West
Langley (District), BC · Langley, BC
Annual Business Plan: Participates in the development and achievement of the annual business plan. Ensures team goals and targets are achieved; ensures employees receive the training and…
Added 4 hours ago
A
Responsable senior de projets numériques et IA / Senior Digital & AI Project Leader
Airbus
Mirabel, QC · Montreal, QC
- Full-time
Bien-être / santé: Programme d’Aide aux Employé.e.s (PAE), programme de rabais, service médical sur site, service de navette gratuite entre Montréal et Mirabel et application de covoiturage.
Added 4 hours ago
Account Manager Group Benefits
The Canada Life Assurance Company
Toronto, ON
Career Development: Opportunities for career advancement, access to industry-leading learning programs and up to $2,000 annually towards education reimbursement.
Added 5 hours ago
M
Staff Software Architect - Ground Control Software
MDA
Brampton, ON
- Full-time
In this role, you will lead the design and development of modular, extensible, testable, and efficient ground control software. You will connect systems and software engineering, guide…
Added 5 hours ago
AI
Senior Forward Deployed AI Engineer (Python, Data & GenAI)
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
…production-grade software engineering, data engineering, AI application development, and client-facing consulting. You will work closely with business users, subject matter experts, product…
Added 5 hours ago
TC
Senior DevSecOps and Application Security SME
ThirdEye CyberSecurity
Regina, SK
- Contract
Provide hands-on DevSecOps and application security expertise for the AppSec Testing Maturity work program.
Added 5 hours ago
C
Customer Service Rep (Bilingual French / English) On-Site
Concentrix
Oshawa, ON
- Full-time
…That’s why we offer a range of no-cost learning and leadership development programs designed to set you on your way to the kind of career you’ve always…
Added 5 hours ago
AH
Clinical Nurse Specialist
Alberta Health Services
Calgary, AB · Greater Calgary Metropolitan Area
- Temporary
…provides an advanced level of nursing practice that maximizes the application of in-depth nursing theory, knowledge and skills in meeting the complex palliative health care needs of…
Added 5 hours ago
PC
Privacy, Legal Counsel Manager
PwC Canada
Toronto, ON
- Full-time
Added 5 hours ago
GC
Coordinator, Materials
Glencore Canada
Elkford, BC
- Full-time
…British Columbia. We are committed to responsible resource development, environmental performance and building strong partnerships with communities and Indigenous…
Added 5 hours ago
Q
GPU Design Verification Engineer
Qualcomm
Markham, ON
- Full-time
Works with team members to understand and align on narrow scope of feature development and meet targets.
Added 5 hours ago
SCM Category Manager, Rotating, Process & E&I Equipment, Pacific Link
Trans Mountain
Calgary, AB
Manage OEM relationships, strategic supplier development initiatives and sole-source risk mitigation strategies.
Added 5 hours ago
BS
Clinical Social Worker
Bright Star Respite
St. Albert, AB
- Part-time
Participate in clinical consultation, professional development, required training and program
Added 5 hours ago
A
Application Support Analyst
Altis
Kamloops, BC
- $40 to $55 CAD / hour
- Contract
You'll assist with application, service, and integration development while following established Software Development Lifecycle (SDLC) practices.
Added 5 hours ago
BC
Medical Radiation Technologist
Brant Community Healthcare System
Brantford, ON
- Full-time
Centralized Education Fund - Opportunities for continuing education and staff development
Added 5 hours ago
CW
B2B Sales Executive
City Wide Facility Solutions
Vancouver, BC
- $50,000 to $100,000 CAD / year
- Full-time
Dedicate a minimum of 30 hours per week to prospecting and new business development activities
Added 5 hours ago
BC
Registered Nurse - Operating Room
Brant Community Healthcare System
Brantford, ON
- Full-time
Centralized Education Fund - opportunities for continuing education and staff development
Added 5 hours ago
BC
Registered Practical Nurse - Operating Room
Brant Community Healthcare System
Brantford, ON
- Full-time
Centralized Education Fund – opportunities for continuing education and staff development.
Added 5 hours ago
BC
Registered Practical Nurse - Operating Room
Brant Community Healthcare System
Brantford, ON
- Full-time
Centralized Education Fund – opportunities for continuing education and staff development.
Added 5 hours ago
CW
B2B Sales Executive
City Wide Facility Solutions
Coquitlam, BC
- $50,000 to $100,000 CAD / year
- Full-time
Dedicate a minimum of 30 hours per week to prospecting and new business development activities
Added 5 hours ago
CW
B2B Sales Executive
City Wide Facility Solutions
Burnaby, BC
- $50,000 to $100,000 CAD / year
- Full-time
Dedicate a minimum of 30 hours per week to prospecting and new business development activities
Added 5 hours ago
SL
Senior Consultant, Strategy, Sunlife Health
Sun Life
Calgary, AB · Vancouver, BC · Toronto, ON · Waterloo, ON · Montreal, QC
- Full-time

ThirdEye CyberSecurity

Senior DevSecOps and Application Security SME

Regina, SK, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: May 3, 2027
Posting language: English
Posted: Nov 4, 2026

Original job description

Senior DevSecOps and Application Security SME

Duration: 10 to 12 months

What you'll do

Provide hands-on DevSecOps and application security expertise for the AppSec Testing Maturity work program.
Configure and optimize GitHub Enterprise and GitHub Advanced Security (GHAS), including CodeQL, code scanning, secret scanning, dependency review, repository rulesets, dashboards, and reporting.
Implement and tune static application security testing (SAST), software composition analysis (SCA), secret scanning, and Infrastructure as Code (IaC) scanning for in-scope repositories and technology stacks.
Integrate security testing into GitHub Actions, Azure DevOps pipelines, pull request workflows, build processes, release gates, and other automated delivery workflows where appropriate.
Create reusable pipeline templates, security configurations, and onboarding patterns that application teams can adopt consistently.
Work with application owners and developers to pilot the controls, validate developer workflows, resolve implementation issues, and support application onboarding.
Define practical processes for vulnerability intake, triage, ownership, prioritization, remediation, exception handling, escalation, verification, and closure.
Configure reporting that shows security-testing coverage, open findings, ownership, severity, aging, remediation status, and exceptions.
Develop application security standards, minimum configuration requirements, implementation guidance, operating procedures, and support documentation.
Assess software supply chain risks involving open-source dependencies, third-party GitHub Actions, build components, and developer tooling.
Provide technical guidance on secure SDLC, DevSecOps, threat modeling, secure coding, and application security risk management.
Collaborate with Cybersecurity, Platform, Applications, Cloud and Infrastructure teams, architecture, change management, application teams, vendors, and the Work Program Manager.
Coach BC Hydro staff and deliver structured knowledge transfer so internal teams can operate and extend the capability after the contract ends.
Provide clear progress updates, document risks and decisions, and contribute to work program deliverables and acceptance evidence.

What you bring

University or College degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field; an equivalent combination of education and relevant experience may be considered.
A minimum of 7 years of relevant experience in software engineering, DevSecOps, application security, cloud security, or closely related work.
A minimum of 3 years of hands-on DevSecOps or application security engineering experience.
Demonstrated hands-on experience implementing GitHub Enterprise and GitHub Advanced Security in a production or large enterprise environment.
Strong experience with CodeQL, SAST, SCA, secret scanning, dependency review, and vulnerability remediation workflows.
Hands-on experience integrating security controls with GitHub Actions and Azure DevOps pipelines.
Experience implementing security checks in pull request, build, and release workflows while balancing security requirements with developer usability.
Experience with Infrastructure as Code and related security scanning. Experience with Terraform, Bicep, ARM templates, or similar technologies is preferred.
A software development or automation background, with the ability to review and troubleshoot code, scripts, pipeline definitions, and YAML-based workflows.
Working knowledge of secure SDLC, OWASP application security practices, software supply chain security, threat modeling, vulnerability management, and risk-based remediation.
Experience designing repeatable application security standards, governance, operating procedures, metrics, and onboarding practices.
Proven ability to work with application teams, cybersecurity teams, platform owners, vendors, contractors, and senior stakeholders.
Clear written and verbal communication skills, including the ability to explain technical risks and decisions to both technical and non-technical audiences.
Demonstrated ability to coach internal resources and complete effective knowledge transfer.
Preferred certifications include:
GIAC Cloud Security Automation (GCSA)
GIAC Cloud Security Essentials (GCLD)
GIAC Public Cloud Security (GPCS)
GitHub Advanced Security (GH-500)
Microsoft Certified: DevOps Engineer Expert (AZ-400)
Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Apply About employer

More about this job

Responsibilities

Implement and optimize GitHub Advanced Security and automated application security controls across repositories, pipelines, pull requests, builds, and releases. Establish security standards, vulnerability workflows, reporting, and onboarding practices while supporting application teams and transferring operational knowledge to internal staff.

Requirements

Requires a degree in a related field or equivalent experience, at least seven years of relevant experience, and at least three years of hands-on DevSecOps or application security engineering. Candidates should have enterprise GitHub Advanced Security experience, strong pipeline and security-scanning expertise, and the ability to guide teams, communicate risks, and deliver knowledge transfer.

Skills

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
GitHub Actions
Azure DevOps
Infrastructure as Code Security
Vulnerability Management
Secure SDLC
Threat Modeling
Software Supply Chain Security
Terraform

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
Dependency Review
GitHub Actions
Azure DevOps
Infrastructure as Code
Terraform
Bicep
ARM Templates
Secure SDLC
OWASP
Software Supply Chain Security
Threat Modeling
Vulnerability Management
Risk-Based Remediation
GIAC Cloud Security Automation
GIAC Cloud Security Essentials
GIAC Public Cloud Security
GitHub Advanced Security Certification
Microsoft Azure Security Engineer Associate

Report this job