Want to know if this job is worth applying to?
Toronto, Ontario, Canada
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Software Engineer - Security based in Canada.
This is an opportunity for a senior security engineer to strengthen the security of modern cloud-native infrastructure and software supply chains. You will contribute to strategic security engineering initiatives, designing and implementing controls across containerized environments, Kubernetes platforms, and CI/CD pipelines. The role combines hands-on engineering with large-scale vulnerability management and security automation. You will help develop hardened container images, secure infrastructure dependencies, and improve remediation processes across engineering teams. You will also explore emerging AI, machine learning, and LLM-based approaches to make security operations more intelligent and efficient. Working in a collaborative engineering environment, you will play an important role in advancing security practices and reducing infrastructure risk.
Design and implement processes for building, maintaining, and distributing hardened container base images for development and production environments, with a focus on minimizing attack surfaces.
Provide technical guidance and engineering solutions to secure Kubernetes clusters and containerized workloads, including runtime security, network policies, and admission controllers.
Strengthen end-to-end infrastructure supply chain security across CI/CD tooling, Infrastructure as Code (IaC) templates, container images, Helm charts, and third-party dependencies.
Build and contribute to security automation initiatives, including the development of custom tools and engineering solutions.
Identify, assess, and triage vulnerabilities discovered through application security reviews, internal penetration testing, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
Partner with engineering teams to prioritize vulnerabilities, define remediation plans, and drive fixes across systems and applications.
Develop, implement, and contribute patches to remediate security vulnerabilities at scale.
Explore and apply AI, machine learning, LLMs, and related techniques to security automation, including automated vulnerability remediation and intelligent alert grouping.
Post-secondary degree in Computer Science, Information Security, or a related discipline, or equivalent practical experience.
Extensive hands-on experience with container security, including designing and deploying hardened container images and securing Kubernetes clusters.
Practical experience with Infrastructure as Code tools, particularly Terraform, to provision and maintain security controls.
Strong experience building and operating security automation solutions, with software development proficiency in Go and/or Python.
Advanced knowledge of GitHub and CI/CD platforms, including GitHub Actions and Jenkins, from both architectural and engineering perspectives.
Expert-level familiarity with Software Composition Analysis (SCA), including hands-on remediation of third-party and open-source dependency vulnerabilities at scale.
Direct experience or a strong conceptual understanding of applying AI, machine learning, Large Language Models (LLMs), or Model Context Protocol (MCP) techniques to security challenges.
Strong knowledge of cloud platforms, particularly AWS and Azure, including their security services and container orchestration capabilities.
Proven ability to collaborate with engineering teams, communicate technical risks, and drive vulnerability remediation initiatives.
Nice to have:
Experience working with Artifactory or JFrog.
Advanced knowledge of application security principles, including the OWASP Top 10.
Familiarity with software supply chain security frameworks such as SLSA.
Contract engagement with an initial duration of 5+ months.
Competitive hourly compensation:
T4 rate: CAD $65–$70 per hour.
Full-time workload of approximately 40 hours per week.
Remote working arrangement, with Toronto, Ontario also listed as a location.
Opportunity to contribute to strategic cloud-native security initiatives and emerging AI-driven security solutions.
.png?1733430365){kind=logo}