Find work in Canada.

594,327 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 8 mins ago
U
CCAIP (IVR) Integration Developer
UST
Toronto, ON
- Full-time
…In this role, you will be responsible for understanding the technical pattern of integration with Google CCAIP ACD, enabling transfer of custom data (SIP/UUI headers, including consumer…
Added 8 mins ago
PM
Tax Senior Specialist
Philip Morris International
Toronto, ON
- Full-time
Build tax understanding as a trusted local subject-matter expert.
Added 38 mins ago
BB
Senior Technician - Security
Bosch Building Technologies North America
AB · Edmonton, AB
- Full-time
Conduct routine maintenance, inspections, and repairs to ensure the continued functionality and reliability of security systems. Troubleshoot and resolve technical issues promptly
Added 54 mins ago
RG
Vice-président(e), tarification / VP, Underwriting
Reinsurance Group of America
Toronto, ON · Montreal, QC
- Full-time
…de la tarification. Elle fournira également des conseils d’expert sur les questions complexes liées à l’évaluation des risques ainsi que sur les tendances émergentes en matière de…
Added 1 hour ago
TC
Senior DevSecOps and Application Security SME
ThirdEye CyberSecurity
Regina, SK
- Contract
Provide technical guidance on secure SDLC, DevSecOps, threat modeling, secure coding, and application security risk management.
Added 1 hour ago
TW
Generative AI Lead
Terribly Wonderful
Toronto, ON
- Full-time
…animated film. This role will serve as both a creative leader and technical innovator, leveraging generative AI technologies to support world-class visual storytelling.Working closely with…
Added 1 hour ago
LH
SENIOR MICROSOFT SYSTEMS ADMINISTRATOR
Logic Hire Solutions LTD
ON · Ontario, Canada
- $110,000 to $160,000 CAD / year
- Full-time
🚀 SENIOR MICROSOFT SYSTEMS ADMINISTRATOR / TECHNICAL LEADToronto, ON | Hybrid (3 Days On-Site) | 7+ Years | Day-1 Impact Required⚡ THE HOOK
Added 1 hour ago
LH
SENIOR MICROSOFT SYSTEMS ADMINISTRATOR
Logic Hire Solutions LTD
Toronto, ON
- $110,000 to $160,000 CAD / year
- Full-time
🚀 SENIOR MICROSOFT SYSTEMS ADMINISTRATOR / TECHNICAL LEADToronto, ON | Hybrid (3 Days On-Site) | 7+ Years | Day-1 Impact Required⚡ THE HOOK
Added 2 hours ago
W
Principal Structural Designer
Worley
Calgary, AB · Edmonton, AB
- Full-time
As a Principal Structural Designer, you will serve as a senior technical authority and design leader for structural design activities across complex, large-scale, and high-value projects.…
Added 3 hours ago
W
Principal Mechanical Engineer
Worley
Calgary, AB · Edmonton, AB
- Full-time
The Principal Mechanical Engineer – Static Equipment is a senior technical authority and subject matter expert responsible for providing strategic engineering leadership for static…
Added 3 hours ago
F
Project Controls Specialist III
Fluor
Vancouver, BC
- Full-time
…team of Project Controls personnel, or as a Subject Manager Expert (SME) for the entire Project Controls Team in the Regional…
Added 3 hours ago
F
Principal Process Engineer - Power Projects
Fluor
Calgary, AB
- Full-time
Serve as a power-process subject-matter expert, provide technical guidance and quality oversight, and mentor less-experienced engineers.
Added 3 hours ago
C
Senior Manager, Complex Accounting
CAE
Montreal, QC
- Full-time
…strategic role within the finance organization. You will act as an expert for management and business units on the accounting implications of unusual and complex transactions and ensure…
Added 3 hours ago
PT
Senior Technician - Security
Paladin Technologies
AB · Edmonton, AB
- Full-time
Conduct routine maintenance, inspections, and repairs to ensure the continued functionality and reliability of security systems. Troubleshoot and resolve technical issues promptly
Added 4 hours ago
BB
Senior Technician - Security
Bosch Building Technologies
AB
- Full-time
Conduct routine maintenance, inspections, and repairs to ensure the continued functionality and reliability of security systems. Troubleshoot and resolve technical issues promptly.
Added 4 hours ago
BT
Director, Supply Chain
BlueRock Therapeutics
Toronto, ON
- Full-time
…organization. This individual will partner closely with Manufacturing, Technical Operations, MSAT, Process Development, Quality, Regulatory, Clinical Operations, and external suppliers to…
Added 4 hours ago
PH
Privacy and Security Analyst, BC Health Workday
Provincial Health Services Authority
BC · British Columbia, Canada
- Full-time
…systems in the health organizations with a single, unified technical system that will standardize and modernize HR and payroll services. It is a significant transformation in BC and is…
Added 4 hours ago
PC
Forensic and Dispute Services Senior Manager (Bilingual FR/EN)
PwC Canada
Montreal, QC
- Full-time
…team, you’ll help provide support to our clients by providing expert advice and opinions in the context of damage quantifications and business valuations in litigation and arbitration…
Added 4 hours ago
PC
Forensic and Dispute Services Senior Manager (Bilingual FR/EN)
PwC Canada
Quebec, QC
- Full-time
…team, you’ll help provide support to our clients by providing expert advice and opinions in the context of damage quantifications and business valuations in litigation and arbitration…
Added 4 hours ago
Financial Advisor - Westgate Plaza, Saskatoon, SK
Scotiabank
Saskatoon, SK
Educating our customers, providing relevant insights and expert advice
Added 4 hours ago
Customer Experience Associate - Chilliwack BC
Scotiabank
Chilliwack, BC
Being a technology expert and sharing your knowledge by introducing clients to our mobile banking applications and assisting them to better manage their banking needs
Added 4 hours ago
M365 Architect
EY
Toronto, ON
We are looking for a Microsoft M365 and Microsoft Entra expert to join our team helping to develop and plan our strategy, support the development of our capabilities and operationalizing…
Added 5 hours ago
C
Senior Advisor, Product Line Management, Maintenance & Managed Services
Ciena
Canada
- Full-time
Serve as the expert portfolio advisor for complex maintenance, managed-service and resident-engineer opportunities.
Added 5 hours ago
AC
Data Engineer - Snowflake, dbtCore/Cloud, AWS
Aviva Canada
Markham, ON
- Full-time
Documentation: Produce and maintain comprehensive technical documentation to support implementation and knowledge sharing.
Added 5 hours ago
EE
Senior Piping Engineer
Equinox Engineering Ltd.
Calgary, AB
- Full-time
We’re looking for a Senior Piping Engineer who brings exceptional technical knowledge, leadership, and a passion for designing safe, efficient, and reliable piping systems. In this role,…

ThirdEye CyberSecurity

Senior DevSecOps and Application Security SME

Regina, SK, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: May 3, 2027
Posting language: English
Posted: Nov 4, 2026

Original job description

Senior DevSecOps and Application Security SME

Duration: 10 to 12 months

What you'll do

Provide hands-on DevSecOps and application security expertise for the AppSec Testing Maturity work program.
Configure and optimize GitHub Enterprise and GitHub Advanced Security (GHAS), including CodeQL, code scanning, secret scanning, dependency review, repository rulesets, dashboards, and reporting.
Implement and tune static application security testing (SAST), software composition analysis (SCA), secret scanning, and Infrastructure as Code (IaC) scanning for in-scope repositories and technology stacks.
Integrate security testing into GitHub Actions, Azure DevOps pipelines, pull request workflows, build processes, release gates, and other automated delivery workflows where appropriate.
Create reusable pipeline templates, security configurations, and onboarding patterns that application teams can adopt consistently.
Work with application owners and developers to pilot the controls, validate developer workflows, resolve implementation issues, and support application onboarding.
Define practical processes for vulnerability intake, triage, ownership, prioritization, remediation, exception handling, escalation, verification, and closure.
Configure reporting that shows security-testing coverage, open findings, ownership, severity, aging, remediation status, and exceptions.
Develop application security standards, minimum configuration requirements, implementation guidance, operating procedures, and support documentation.
Assess software supply chain risks involving open-source dependencies, third-party GitHub Actions, build components, and developer tooling.
Provide technical guidance on secure SDLC, DevSecOps, threat modeling, secure coding, and application security risk management.
Collaborate with Cybersecurity, Platform, Applications, Cloud and Infrastructure teams, architecture, change management, application teams, vendors, and the Work Program Manager.
Coach BC Hydro staff and deliver structured knowledge transfer so internal teams can operate and extend the capability after the contract ends.
Provide clear progress updates, document risks and decisions, and contribute to work program deliverables and acceptance evidence.

What you bring

University or College degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field; an equivalent combination of education and relevant experience may be considered.
A minimum of 7 years of relevant experience in software engineering, DevSecOps, application security, cloud security, or closely related work.
A minimum of 3 years of hands-on DevSecOps or application security engineering experience.
Demonstrated hands-on experience implementing GitHub Enterprise and GitHub Advanced Security in a production or large enterprise environment.
Strong experience with CodeQL, SAST, SCA, secret scanning, dependency review, and vulnerability remediation workflows.
Hands-on experience integrating security controls with GitHub Actions and Azure DevOps pipelines.
Experience implementing security checks in pull request, build, and release workflows while balancing security requirements with developer usability.
Experience with Infrastructure as Code and related security scanning. Experience with Terraform, Bicep, ARM templates, or similar technologies is preferred.
A software development or automation background, with the ability to review and troubleshoot code, scripts, pipeline definitions, and YAML-based workflows.
Working knowledge of secure SDLC, OWASP application security practices, software supply chain security, threat modeling, vulnerability management, and risk-based remediation.
Experience designing repeatable application security standards, governance, operating procedures, metrics, and onboarding practices.
Proven ability to work with application teams, cybersecurity teams, platform owners, vendors, contractors, and senior stakeholders.
Clear written and verbal communication skills, including the ability to explain technical risks and decisions to both technical and non-technical audiences.
Demonstrated ability to coach internal resources and complete effective knowledge transfer.
Preferred certifications include:
GIAC Cloud Security Automation (GCSA)
GIAC Cloud Security Essentials (GCLD)
GIAC Public Cloud Security (GPCS)
GitHub Advanced Security (GH-500)
Microsoft Certified: DevOps Engineer Expert (AZ-400)
Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Apply About employer

More about this job

Responsibilities

Implement and optimize GitHub Advanced Security and automated application security controls across repositories, pipelines, pull requests, builds, and releases. Establish security standards, vulnerability workflows, reporting, and onboarding practices while supporting application teams and transferring operational knowledge to internal staff.

Requirements

Requires a degree in a related field or equivalent experience, at least seven years of relevant experience, and at least three years of hands-on DevSecOps or application security engineering. Candidates should have enterprise GitHub Advanced Security experience, strong pipeline and security-scanning expertise, and the ability to guide teams, communicate risks, and deliver knowledge transfer.

Skills

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
GitHub Actions
Azure DevOps
Infrastructure as Code Security
Vulnerability Management
Secure SDLC
Threat Modeling
Software Supply Chain Security
Terraform

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
Application Security
GitHub Enterprise
GitHub Advanced Security
CodeQL
SAST
Software Composition Analysis
Secret Scanning
Dependency Review
GitHub Actions
Azure DevOps
Infrastructure as Code
Terraform
Bicep
ARM Templates
Secure SDLC
OWASP
Software Supply Chain Security
Threat Modeling
Vulnerability Management
Risk-Based Remediation
GIAC Cloud Security Automation
GIAC Cloud Security Essentials
GIAC Public Cloud Security
GitHub Advanced Security Certification
Microsoft Azure Security Engineer Associate

Report this job