DevSecOps Engineer (Remote from Canada)

Jobgether; Canada; Remote; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary and stock options

Comprehensive health benefits

Home-office setup allowance

Monthly remote work stipend

Inclusive work environment

Inclusive culture

Job summary

A technology company is seeking a DevSecOps Engineer to enhance security, reliability, and DevOps within cloud infrastructure. The role involves embedding security in CI/CD pipelines, automating remediation, and leading incident response. With strong qualifications in cloud-native environments and security practices, the candidate will work closely with engineering and product teams. This position offers competitive salary, stock options, health benefits, and the opportunity to work remotely in a diverse and inclusive environment.

Qualifications

• 5+ years of experience in DevSecOps, security engineering, or cloud security within modern cloud-native environments.
• Hands-on experience with cloud service providers (AWS, GCP, or Azure), Kubernetes, Terraform, and container security.
• Strong knowledge of secure CI/CD practices, including IaC security, dependency scanning, secrets management, and policy-as-code.

Responsibilities

• Embed security into CI/CD pipelines.
• Automate vulnerability management and remediation.
• Harden cloud and Kubernetes environments.
• Support SBOMs, artifact signing, and dependency governance for supply chain security.
• Develop secure deployment patterns including canary rollouts and safe rollbacks.
• Lead security design reviews and threat modeling for new services and architectures.
• Enforce least privilege and secure secrets lifecycle in IAM.
• Assist with compliance and audit readiness by documenting controls.
• Collaborate with engineering to promote secure coding and risk-based decisions.
• Define and report security KPIs to drive improvements.

Skills

DevSecOps

Cloud security

Kubernetes

Terraform

Python

GCP

AWS

Go

Incident response

On-call

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Cloud service providers (AWS, GCP, Azure)

CI/CD tools

Container security tools

Job description

We are currently looking for a DevSecOps Engineer in Canada.

In this role, you will be at the forefront of security, reliability, and DevOps, designing and implementing resilient cloud infrastructure and CI/CD pipelines. You will embed security as code throughout the software development lifecycle, automate remediation, and strengthen platform defenses while enabling rapid and safe delivery at scale. Partnering closely with engineering, DevOps, and product teams, you will help lead incident response for high‑severity outages and drive measurable improvements in operational and security resilience.

Accountabilities

• Embed security into CI/CD pipelines, including Infrastructure as Code scanning, secrets management, Software Composition Analysis, policy‑as‑code, and deployment guardrails.
• Automate vulnerability management, patching, and remediation across cloud and containerized workloads.
• Harden cloud and Kubernetes environments through secure configurations, network segmentation, and workload identity management.
• Advance supply chain security by managing SBOMs, artifact signing, and dependency governance.
• Develop secure deployment patterns, including canary rollouts, safe rollbacks, and guardrails to minimize impact.
• Conduct security design reviews and threat modeling for new services and major architecture changes.
• Strengthen identity and access management practices, enforcing least privilege and secure secrets lifecycle.
• Support compliance and audit readiness by operationalizing controls and maintaining documentation.
• Partner with engineering teams to champion secure coding practices and risk‑based decision‑making.
• Define and report key security KPIs, driving continuous improvement across infrastructure and platform security.

Requirements

• 5+ years of experience in DevSecOps, security engineering, or cloud security within modern cloud‑native environments.
• Hands‑on experience with cloud service providers (AWS, GCP, or Azure), Kubernetes, Terraform, and container security.
• Strong knowledge of secure CI/CD practices, including IaC security, dependency scanning, secrets management, and policy‑as‑code.
• Experience automating vulnerability and patch management workflows.
• Proficiency in scripting/programming (Python, Go, or similar) for security tooling and automation.
• Solid understanding of identity and access management concepts.
• Familiarity with detection engineering, logging, telemetry, and incident response processes.
• Ability to collaborate with cross‑functional teams, explaining risks and influencing secure design decisions.
• Comfortable participating in on‑call rotations and handling high‑severity incidents.
• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.

Benefits

• Competitive salary and stock options.
• Comprehensive health benefits.
• New hire home‑office setup allowance (USD $500).
• Monthly stipend for remote work expenses (USD $150 via Brex Card).
• Opportunity to work remotely with a globally distributed team.
• Inclusive, diverse, and supportive work environment.