Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 8 days ago
AI
Senior Appian Developer
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Design, develop, and maintain enterprise applications using the Appian low-code platform
Added 8 days ago
C
Python SDET (Data Validation & API Testing)
CGI
Halifax, NS
- Full-time
This is a full-time permanent opportunity based in Bedford, Nova Scotia, requiring four days per week onsite
Added 8 days ago
CO
Temporary Technical Lead (Housing Accelerator Fund) Up to 18 Months
City of Saint John
Saint John, NB
- Temporary
Coordinating and delivering workstreams associated with the implementation of a new enterprise e-permitting solution, including business process review and redesign, system configuration,…
Added 8 days ago
TC
Senior Distribution Services Operations Trainer
TJX Canada – Winners, Marshalls, HomeSense
Mississauga, ON
- $76,620 to $107,268 CAD / year
- Full-time
Collaborate with cross-functional partners to ensure alignment between Distribution Center training programs and broader enterprise learning initiatives.
Added 8 days ago
C
Senior Identity Security Engineer
CPKC
Calgary, AB
- Full-time
…network devices, cloud platforms, directory services, SaaS applications, and other enterprise technologies, including the development of custom connectors, scripts, APIs, and automation…
Added 8 days ago
MC
Cloud Platform Engineer – Kubernetes (36051)
Myticas Consulting
Toronto, ON
- Contract
Required Qualifications – Must Have · Location Requirement: Candidates must be based in the Greater Toronto Area (GTA)
Added 8 days ago
AW
Application Development Manager
Agilus Work Solutions
Mississauga, ON
- $140,000 to $155,000 CAD / year
- Full-time
…software development team responsible for client-facing web applications, APIs, integration services, and enterprise data-processing…
Added 8 days ago
'
Forward Deployment Engineer Lead - Manufacturing
''
Toronto, ON
- Full-time
- Other
Experience developing solutions that integrate large language models with enterprise data, knowledge systems, APIs, applications, and business workflows
Added 8 days ago
CC
RQ11599 - Technology Architect (Oracle, with IBM TRIRIGA, WebSphere)
CCI- Computer Consultants International, Inc.
Toronto, ON
- Full-time
Technology Architect/Database Administrator MUST HAVE the following skills and experience:
Added 8 days ago
AW
Senior Java Software Engineer
Agilus Work Solutions
Toronto, ON
- $100,000 to $120,000 CAD / year
- Full-time
🏢 Hybrid: 1 Day Per Week In Office
Added 8 days ago
C
Senior Manager, Safety Management System & Safety Culture-EN
CAE
Montreal, QC
- Full-time
…analysis, decision-making and alignment with the Corporate Enterprise Risk Management (ERM)…
Added 8 days ago
C
Senior Manager, Complex Accounting-EN
CAE
Montreal, QC
- Full-time
…experts safeguarding our future - every role is essential. Our enterprise functions don’t just support; they lead, playing a critical role in shaping the company’s path forward and ensuring…
Added 8 days ago
S
Engineer, Distribution Asset Standards & Testing
SaskPower
SK · Saskatchewan, Canada
- Full-time
Must have a continuing record of professional development
Added 8 days ago
U
CCAIP (IVR) Integration Developer
UST
Toronto, ON
- Full-time
We are seeking a CCAIP Integration and IVR Developer to architect, build, and maintain seamless integrations between our Google Contact Center AI Platform (CCAIP), IVR flows, and enterprise…
Added 8 days ago
DR
Business Services Specialist
Durham Region (The Regional Municipality of Durham)
Whitby, ON
- Full-time
Note: This role may be required to work additional days per week in the office as dictated by operational needs
Added 8 days ago
A
Responsable senior de projets numériques et IA / Senior Digital & AI Project Leader
Airbus
Mirabel, QC · Montreal, QC
- Full-time
Added 8 days ago
AI
Senior Forward Deployed AI Engineer (Python, Data & GenAI)
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Design, develop, and deploy enterprise AI and data applications using Python, PySpark, SQL, REST APIs, FastAPI, and cloud data platforms.
Added 8 days ago
TC
Senior DevSecOps and Application Security SME
ThirdEye CyberSecurity
Regina, SK
- Contract
Configure and optimize GitHub Enterprise and GitHub Advanced Security (GHAS), including CodeQL, code scanning, secret scanning, dependency review, repository rulesets, dashboards, and…
Added 8 days ago
L
Legal Director
Lumentis
Innisfil, ON
- Full-time
…decisions by providing timely legal partnership, protecting enterprise value, maintaining strong governance and compliance, and managing risk…
Added 8 days ago
A
Application Support Analyst
Altis
Kamloops, BC
- $40 to $55 CAD / hour
- Contract
0 to 3 years of experience supporting enterprise systems, applications, or infrastructure environments.
Added 8 days ago
NT
Manager Security Assurance
NZ Transport Agency Waka Kotahi
Hamilton, ON
- Full-time
To be considered for this position you must have a legal right to live and work in New Zealand
Added 8 days ago
1
Account Director
15Rock
Toronto, ON
- Full-time
US$20B in enterprise value identified in our value creation plans
Added 8 days ago
M
Group Finance Manager, Canada Enterprise Team
Microsoft
Toronto, ON
- Full-time
…from teams in the Field, Americas Region and in the Global Enterprise Sales (GES) organization? Energized by teamwork, a great culture, accelerating your career, being owner/partner to a…
Added 8 days ago
M
Director, Sales
Microsoft
Toronto, ON
- Full-time
Microsoft’s Enterprise Account Team focuses on partnering with customers to achieve strategic goals. This team is responsible for providing differentiated customer experience for our…
Added 8 days ago
U
Directeur principal, Ingénierie logicielle – WFM / Sr Dir. Software Development - WFM
UKG
Montreal, QC
- Full-time
Expertise approfondie en Java, applications web, technologies infonuagiques et applications natives d’intelligence artificielle.

ThirdEye CyberSecurity

Senior DevSecOps and Application Security SME

Regina, SK, Canada

Contract

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: May 3, 2027
Posting language: English
Posted: Nov 4, 2026

Original job description

Senior DevSecOps and Application Security SME

Duration: 10 to 12 months

What you'll do

Provide hands-on DevSecOps and application security expertise for the AppSec Testing Maturity work program.
Configure and optimize GitHub Enterprise and GitHub Advanced Security (GHAS), including CodeQL, code scanning, secret scanning, dependency review, repository rulesets, dashboards, and reporting.
Implement and tune static application security testing (SAST), software composition analysis (SCA), secret scanning, and Infrastructure as Code (IaC) scanning for in-scope repositories and technology stacks.
Integrate security testing into GitHub Actions, Azure DevOps pipelines, pull request workflows, build processes, release gates, and other automated delivery workflows where appropriate.
Create reusable pipeline templates, security configurations, and onboarding patterns that application teams can adopt consistently.
Work with application owners and developers to pilot the controls, validate developer workflows, resolve implementation issues, and support application onboarding.
Define practical processes for vulnerability intake, triage, ownership, prioritization, remediation, exception handling, escalation, verification, and closure.
Configure reporting that shows security-testing coverage, open findings, ownership, severity, aging, remediation status, and exceptions.
Develop application security standards, minimum configuration requirements, implementation guidance, operating procedures, and support documentation.
Assess software supply chain risks involving open-source dependencies, third-party GitHub Actions, build components, and developer tooling.
Provide technical guidance on secure SDLC, DevSecOps, threat modeling, secure coding, and application security risk management.
Collaborate with Cybersecurity, Platform, Applications, Cloud and Infrastructure teams, architecture, change management, application teams, vendors, and the Work Program Manager.
Coach BC Hydro staff and deliver structured knowledge transfer so internal teams can operate and extend the capability after the contract ends.
Provide clear progress updates, document risks and decisions, and contribute to work program deliverables and acceptance evidence.

What you bring

University or College degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field; an equivalent combination of education and relevant experience may be considered.
A minimum of 7 years of relevant experience in software engineering, DevSecOps, application security, cloud security, or closely related work.
A minimum of 3 years of hands-on DevSecOps or application security engineering experience.
Demonstrated hands-on experience implementing GitHub Enterprise and GitHub Advanced Security in a production or large enterprise environment.
Strong experience with CodeQL, SAST, SCA, secret scanning, dependency review, and vulnerability remediation workflows.
Hands-on experience integrating security controls with GitHub Actions and Azure DevOps pipelines.
Experience implementing security checks in pull request, build, and release workflows while balancing security requirements with developer usability.
Experience with Infrastructure as Code and related security scanning. Experience with Terraform, Bicep, ARM templates, or similar technologies is preferred.
A software development or automation background, with the ability to review and troubleshoot code, scripts, pipeline definitions, and YAML-based workflows.
Working knowledge of secure SDLC, OWASP application security practices, software supply chain security, threat modeling, vulnerability management, and risk-based remediation.
Experience designing repeatable application security standards, governance, operating procedures, metrics, and onboarding practices.
Proven ability to work with application teams, cybersecurity teams, platform owners, vendors, contractors, and senior stakeholders.
Clear written and verbal communication skills, including the ability to explain technical risks and decisions to both technical and non-technical audiences.
Demonstrated ability to coach internal resources and complete effective knowledge transfer.
Preferred certifications include:
GIAC Cloud Security Automation (GCSA)
GIAC Cloud Security Essentials (GCLD)
GIAC Public Cloud Security (GPCS)
GitHub Advanced Security (GH-500)
Microsoft Certified: DevOps Engineer Expert (AZ-400)
Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Apply on LinkedIn About employer

More about this job

Responsibilities

Implement and optimize GitHub Advanced Security and automated application security controls across repositories, pipelines, pull requests, builds, and releases. Establish security standards, vulnerability workflows, reporting, and onboarding practices while supporting application teams and transferring operational knowledge to internal staff.

Requirements

Requires a degree in a related field or equivalent experience, at least seven years of relevant experience, and at least three years of hands-on DevSecOps or application security engineering. Candidates should have enterprise GitHub Advanced Security experience, strong pipeline and security-scanning expertise, and the ability to guide teams, communicate risks, and deliver knowledge transfer.

Skills

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
GitHub Actions
Azure DevOps
Infrastructure as Code Security
Vulnerability Management
Secure SDLC
Threat Modeling
Software Supply Chain Security
Terraform

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
Dependency Review
GitHub Actions
Azure DevOps
Infrastructure as Code
Terraform
Bicep
ARM Templates
Secure SDLC
OWASP
Software Supply Chain Security
Threat Modeling
Vulnerability Management
Risk-Based Remediation
GIAC Cloud Security Automation
GIAC Cloud Security Essentials
GIAC Public Cloud Security
GitHub Advanced Security Certification
Microsoft Azure Security Engineer Associate

Report this job

Work requirements

Jobs in Canada