Find work in Canada.

597,480 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 47 mins ago
SS
Databricks Developer-Analyst
Sky Systems, Inc. (SkySys)
Montreal, QC
- Full-time
Titre/Title: Développeur-analyste Databricks / Databricks Developer-Analyst
Added 1 hour ago
IS
Quality Engineering Lead
Iris Software Inc.
Toronto, ON
- Contract
Collaborate closely with Development, Product, Architecture, Security, and DevOps teams throughout the SDLC.
Added 1 hour ago
CL
CCAIP (IVR) Integration Developer
Cloudious LLC
Toronto, ON · North York, ON
- Contract
We are looking for a skilled CCAIP Integration and IVR Developer to architect, build, and maintain seamless integrations between our Google Contact Center AI Platform (CCAIP), IVR flows and…
Added 1 hour ago
LH
Senior Systems Deployment Specialist
LGI Healthcare Solutions
Montreal, QC
- Full-time
Good knowledge of Azure DevOps and proficiency with tools used to prepare, execute, and track deployment work.
Added 1 hour ago
BI
PeopleSoft HCM Technical Delivery Lead
BURGEON IT SERVICES
Mississauga, ON
- Contract
Solid technical expertise in Oracle Database, SQL/PLSQL, Performance Tuning, Cloud Platforms (AWS/Azure/OCI), CI/CD Pipelines, DevOps practices, and Integration Monitoring.
Added 1 hour ago
Test Automation Engineer
Red River Mutual
Winnipeg, MB
Solid understanding of CI/CD tools and practices, including Azure DevOps and/or Bitbucket.
Added 2 hours ago
Java Developer (Onsite Hybrid)
NTT DATA Services
Montreal, QC
We are currently seeking a Java Developer (Onsite Hybrid) to join our team in Montreal, Quebec (CA-QC), Canada (CA).
Added 3 hours ago
MC
Release Engineer
Meridian Credit Union
St. Catharines, ON · Toronto, ON · Etobicoke, ON
- Full-time
Expert, hands-on knowledge of Git branching strategies (trunk-based and GitFlow), Azure DevOps Pipelines and Artifacts, and GitHub Actions
Added 4 hours ago
BC
AI Engineer
BDO Canada
Toronto, ON
- Full-time
Practical experience with DevOps and MLOps practices, including Docker, Kubernetes, and CI/CD pipelines for machine learning workloads.
Added 6 hours ago
R
Deployed Engineer
Randox
Toronto, ON
- $80,000 to $130,000 CAD / year
- Full-time
Experience in any of the following: Backend, Frontend & Full Stack Engineering, Platform, Cloud & DevOps, Data Engineering & AI/ML, Robotics Software & Automation, QA & Test Automation,…
Added 6 hours ago
AI
Chatbot Content Developer - Python/Java, AI
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Collaborate with engineering and DevOps teams to improve chatbot knowledge sources.
Added 7 hours ago
C
DevOps Engineer
Corpay
Vancouver, BC
- Full-time
Added 9 hours ago
AI
Senior Appian Developer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Collaborate with business stakeholders, architects, QA, and DevOps teams
Added 9 hours ago
AW
Application Development Manager
Agilus Work Solutions
Mississauga, ON
- $140,000 to $155,000 CAD / year
- Full-time
Experience with CI/CD, DevOps, and engineering best practices
Added 10 hours ago
C
Développeur Intermédiaire SR- Microsoft Business Central
CGI
Montreal, QC · Greater Montreal Metropolitan Area
- Full-time
Familiarité avec Git, Azure DevOps ou autres outils de CI/CD.
Added 10 hours ago
C
SR Automation TOSCA DI Lead
Cognizant
Mississauga, ON
- Full-time
Harness, Jenkins, Azure DevOps, or GitHub Actions
Added 10 hours ago
U
CCAIP (IVR) Integration Developer
UST
Toronto, ON
- Full-time
We are seeking a CCAIP Integration and IVR Developer to architect, build, and maintain seamless integrations between our Google Contact Center AI Platform (CCAIP), IVR flows, and enterprise…
Added 11 hours ago
TC
Senior DevSecOps and Application Security SME
ThirdEye CyberSecurity
Regina, SK
- Contract
Integrate security testing into GitHub Actions, Azure DevOps pipelines, pull request workflows, build processes, release gates, and other automated delivery workflows where appropriate.
Added 14 hours ago
MC
Azure Databricks Cloud Migration & Platform Engineer (36101)
Myticas Consulting
Toronto, ON
- Contract
Support CI/CD pipelines using Azure DevOps, GitHub Actions, or equivalent tools.
Added 14 hours ago
IG
D365 F&O Developer
Insight Global
Canada
- $87 to $100 CAD / hour
- Contract
Insight Global is seeking a D365 F&O Developer for a top ERP-focused client for 2 month project-based work. This candidate will join the ERP Development team to design, build, and support…
Added 14 hours ago
MC
Microsoft Dynamics 365 Finance Functional Consultant – D365 F&O | Manufacturing (35742)
Myticas Consulting
Toronto, ON
- Contract
Complete outstanding Azure DevOps (ADO) tasks assigned to the Accounting team.
Added 14 hours ago
B
Senior Databricks Data Platform Engineer
Brillio
Canada
- Contract
…combine deep hands-on Databricks expertise with a FinOps and DevOps mindset, and you will measure your success in platform reliability, developer productivity, and dollars…
Added 14 hours ago
J
DevOps Technical Lead / Architect - Azure & Terraform
Jobgether
Canada
- $150,000 to $165,000 CAD / year
- Full-time
…all applications and next steps. Our partner is looking for a DevOps Technical Lead / Architect – Azure & Terraform based in…
Added 14 hours ago
MC
Technical Consultant III (35732)
Myticas Consulting
Toronto, ON
- Full-time
Work closely with Architecture, Product Management, Engineering, QA, DevOps, Functional Consulting, and implementation teams to resolve complex technical decisions.
Added 14 hours ago
RI
Backend Developer (Ruby/Golang)
Raas Infotek
Toronto, ON
- Contract
Collaborate with DevOps teams on AWS, CI/CD, monitoring, and deployments.

ThirdEye CyberSecurity

Senior DevSecOps and Application Security SME

Regina, SK, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: May 3, 2027
Posting language: English
Posted: Nov 4, 2026

Original job description

Senior DevSecOps and Application Security SME

Duration: 10 to 12 months

What you'll do

Provide hands-on DevSecOps and application security expertise for the AppSec Testing Maturity work program.
Configure and optimize GitHub Enterprise and GitHub Advanced Security (GHAS), including CodeQL, code scanning, secret scanning, dependency review, repository rulesets, dashboards, and reporting.
Implement and tune static application security testing (SAST), software composition analysis (SCA), secret scanning, and Infrastructure as Code (IaC) scanning for in-scope repositories and technology stacks.
Integrate security testing into GitHub Actions, Azure DevOps pipelines, pull request workflows, build processes, release gates, and other automated delivery workflows where appropriate.
Create reusable pipeline templates, security configurations, and onboarding patterns that application teams can adopt consistently.
Work with application owners and developers to pilot the controls, validate developer workflows, resolve implementation issues, and support application onboarding.
Define practical processes for vulnerability intake, triage, ownership, prioritization, remediation, exception handling, escalation, verification, and closure.
Configure reporting that shows security-testing coverage, open findings, ownership, severity, aging, remediation status, and exceptions.
Develop application security standards, minimum configuration requirements, implementation guidance, operating procedures, and support documentation.
Assess software supply chain risks involving open-source dependencies, third-party GitHub Actions, build components, and developer tooling.
Provide technical guidance on secure SDLC, DevSecOps, threat modeling, secure coding, and application security risk management.
Collaborate with Cybersecurity, Platform, Applications, Cloud and Infrastructure teams, architecture, change management, application teams, vendors, and the Work Program Manager.
Coach BC Hydro staff and deliver structured knowledge transfer so internal teams can operate and extend the capability after the contract ends.
Provide clear progress updates, document risks and decisions, and contribute to work program deliverables and acceptance evidence.

What you bring

University or College degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field; an equivalent combination of education and relevant experience may be considered.
A minimum of 7 years of relevant experience in software engineering, DevSecOps, application security, cloud security, or closely related work.
A minimum of 3 years of hands-on DevSecOps or application security engineering experience.
Demonstrated hands-on experience implementing GitHub Enterprise and GitHub Advanced Security in a production or large enterprise environment.
Strong experience with CodeQL, SAST, SCA, secret scanning, dependency review, and vulnerability remediation workflows.
Hands-on experience integrating security controls with GitHub Actions and Azure DevOps pipelines.
Experience implementing security checks in pull request, build, and release workflows while balancing security requirements with developer usability.
Experience with Infrastructure as Code and related security scanning. Experience with Terraform, Bicep, ARM templates, or similar technologies is preferred.
A software development or automation background, with the ability to review and troubleshoot code, scripts, pipeline definitions, and YAML-based workflows.
Working knowledge of secure SDLC, OWASP application security practices, software supply chain security, threat modeling, vulnerability management, and risk-based remediation.
Experience designing repeatable application security standards, governance, operating procedures, metrics, and onboarding practices.
Proven ability to work with application teams, cybersecurity teams, platform owners, vendors, contractors, and senior stakeholders.
Clear written and verbal communication skills, including the ability to explain technical risks and decisions to both technical and non-technical audiences.
Demonstrated ability to coach internal resources and complete effective knowledge transfer.
Preferred certifications include:
GIAC Cloud Security Automation (GCSA)
GIAC Cloud Security Essentials (GCLD)
GIAC Public Cloud Security (GPCS)
GitHub Advanced Security (GH-500)
Microsoft Certified: DevOps Engineer Expert (AZ-400)
Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Apply About employer

More about this job

Responsibilities

Implement and optimize GitHub Advanced Security and automated application security controls across repositories, pipelines, pull requests, builds, and releases. Establish security standards, vulnerability workflows, reporting, and onboarding practices while supporting application teams and transferring operational knowledge to internal staff.

Requirements

Requires a degree in a related field or equivalent experience, at least seven years of relevant experience, and at least three years of hands-on DevSecOps or application security engineering. Candidates should have enterprise GitHub Advanced Security experience, strong pipeline and security-scanning expertise, and the ability to guide teams, communicate risks, and deliver knowledge transfer.

Skills

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
GitHub Actions
Azure DevOps
Infrastructure as Code Security
Vulnerability Management
Secure SDLC
Threat Modeling
Software Supply Chain Security
Terraform

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
Dependency Review
GitHub Actions
Azure DevOps
Infrastructure as Code
Terraform
Bicep
ARM Templates
Secure SDLC
OWASP
Software Supply Chain Security
Threat Modeling
Vulnerability Management
Risk-Based Remediation
GIAC Cloud Security Automation
GIAC Cloud Security Essentials
GIAC Public Cloud Security
GitHub Advanced Security Certification
Microsoft Azure Security Engineer Associate

Report this job