Security Architect

Ateko, backed by Bell Canada; Montreal (administrative region); On-site; CAD 120,000 - 160,000; Full time

Job summary

Ateko, backed by Bell Canada, seeks a Senior Security Architect to design and implement secure, scalable cloud and application ecosystems across the SDLC. You will merge cybersecurity architecture with DevOps automation to embed security throughout software delivery and leverage automation and AI-enabled tooling to proactively manage risks.

Collaborate with engineering, DevOps, and delivery teams to implement policy-as-code, automated compliance, and zero-trust controls.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or equivalent.
• 5+ years in security, development, or DevSecOps.
• 3–7 years in AppSec/DevSecOps or secure software development.

Responsibilities

• Integrate security controls into CI/CD pipelines (SAST, DAST, SCA, secrets scanning).
• Build and maintain security automation using scripting and IaC tools.
• Implement policy-as-code and automated compliance validation.
• Apply enterprise and cloud security architectures aligned with business and compliance requirements.
• Apply zero-trust principles across identity, network, and workloads.
• Leverage AI tools to enhance threat detection, anomaly detection, and alert triage.
• Evaluate and secure AI pipelines and models.
• Explore automation using AI-assisted security operations.
• Partner with Delivery teams to embed secure coding practices.
• Act as a security advisor during system design and architecture discussions.
• Provide guidance on cloud security posture management and risk mitigation.
• Contribute to security standards, frameworks, and governance.

Skills

DevSecOps experience

Secure SDLC

Threat modelling

Automation

AI in security

Education

Bachelor’s degree in Cybersecurity, CS, or IT

5+ years in security/development/DevSecOps

Tools

SAST

DAST

SCA

IaC tooling

CI/CD tooling

Job description

About the Company

As a leading organization in the tech industry, we are committed to innovation and excellence. Our mission is to provide secure and scalable solutions that empower businesses to thrive in a digital world. We foster a culture of collaboration, diversity, and continuous learning.

About the Role

As a Senior Security Architect your role will be to design and implement secure, scalable, and automated solutions across our cloud and application ecosystems. This role blends cybersecurity architecture, DevOps automation, and emerging AI capabilities to ensure security is embedded throughout the software development lifecycle (SDLC). You will collaborate closely with engineering, DevOps, and delivery teams to build secure-by-design systems, leveraging automation and intelligent tooling to proactively manage risks.

Responsibilities

• Integrate security controls into CI/CD pipelines (SAST, DAST, SCA, secrets scanning).
• Build and maintain security automation using scripting and Infrastructure-as-Code (IaC) tools.
• Implement policy-as-code and automated compliance validation.
• Apply enterprise and cloud security architectures aligned with business and compliance requirements.
• Apply zero-trust principles across identity, network, and workloads.
• Leverage AI tools to enhance threat detection, anomaly detection, and alert triage.
• Evaluate and secure AI pipelines and models.
• Explore automation using AI-assisted security operations.
• Partner with Delivery teams to embed secure coding practices.
• Act as a security advisor during system design and architecture discussions.
• Provide guidance on cloud security posture management and risk mitigation.
• Contribute to security standards, frameworks, and governance.

What Success Looks Like

• Security controls seamlessly integrated into CI/CD pipelines.
• Reduced vulnerabilities through automated detection and remediation.
• Adoption of AI-driven security insights to improve response time.
• Secure and scalable architectures supporting business innovation.

Qualifications

• Bachelor’s degree in one of the following: Cybersecurity, Computer Science / Software Engineering, Information Technology OR equivalent practical experience (typically 5+ years in security, development, or DevSecOps).
• Minimum of 7-10 years of experience in DevOps, Site Reliability Engineering (SRE), or Software Engineering roles.
• 3–7 years of relevant experience in at least one area: Application Security (AppSec), DevSecOps / DevOps security, Secure software development.
• Proven experience in Implementing and managing application scanning tools (SAST, DAST, SCA), Integrating security into CI/CD pipelines and working closely with development and engineering teams.
• Hands-on experience with SAST, SCA, IAC & DAST.
• Experience with CI/CD Tools, scripting, and practical understanding of major languages.
• Basic understanding AI assisted security tools for triage and scanning optimization.
• Experience with automated vulnerability management workflows.

Required Skills

• Hands-on experience with: SAST, DAST, SCA and Secrets scanning tools.
• Ability to tune scans (reduce false positives/negatives), Customize rules and policies and Correlate findings across tools.
• DevSecOps and automated gating policies integration.
• Risk analysis and vulnerabilities management.
• Deep Application security expertise.
• Strong Knowledge of secure coding practices across different languages.
• Ability to translate scan results into architectural improvements.
• Automation and AI in scanning.
• Ability to translate technical results into risk narratives.

Preferred Skills

• Experience with advanced AI tools for security operations.
• Familiarity with cloud security frameworks and compliance standards.

Equal Opportunity Statement

We are an equal opportunity employer and are committed to creating a diverse and inclusive workplace. We encourage applications from all qualified individuals regardless of race, gender, age, sexual orientation, disability, or any other characteristic protected by law.