Security Developer (DevSecOps)

Z953; Montreal (administrative region); On-site; CAD 100,000 - 130,000; Full time

Benefits offered by this job

Office in Montreal

Hybrid work Fridays

Wellness program

Café and meals

Job summary

Stingray is seeking a Security Developer (DevSecOps) to strengthen our cybersecurity posture and automate alert remediation. You will design and implement AI-assisted security workflows, secure deployment pipelines, and collaborate with development teams to embed security from design.

With 5+ years in security or DevOps, you will work hybrid from Montreal, using Python/Go, Terraform and cloud security services to safeguard our applications and cloud infrastructure across CI/CD environments.

Qualifications

• Bachelor's degree in computer science or information security required.
• 5+ years of experience in application or cloud security or DevOps engineering.
• Strong command of Python, Go or Bash.
• Experience with at least one major cloud provider and its security services.

Responsibilities

• Operate and improve CNAPP platform to detect, prioritize, and track remediation of cloud and application security risks.
• Design, build and operate AI agents to automate security assessment and remediation.
• Integrate AI-assisted development tools into the DevSecOps workflow.
• Apply expertise in cloud security and continuous monitoring to mitigate risks.

Skills

Python

Go

Bash

Cloud security

DevSecOps

CI/CD automation

AI tooling

Team collaboration

Strong communication

Education

Bachelor's degree in computer science or information security

Tools

Docker

Kubernetes

Terraform

CI/CD tools

AI integration tools

Job description

At Stingray, creativity, collaboration and innovative technology are the pillars of our DNA. Are you ready to rock your career by joining a fast-growing company and a team of music lovers in a stimulating and fun work environment?

You’ll join a team working to advance Stingray’s application security, one pipeline at a time. Your mandate: strengthen the security posture of our applications, automate the prioritization and tracking of alert remediation, and equip our developers so they build in the right reflexes from the design stage. A role where you build as much as you advise.

We’re looking for a Security Developer (DevSecOps) with at least 5 years of experience in application or cloud security to round out our cybersecurity team. You’ll report to the Team Manager – Cybersecurity.

• Operate and improve our CNAPP platform to detect, prioritize and track the remediation of cloud and application security risks, and respond to security alerts and incidents
• Design, build and operate AI agents to automate continuous security assessment, alert triage and assisted remediation (development environments, pipelines and cloud infrastructure)
• Integrate AI-assisted development tools (e.g. Cursor, Claude) into the DevSecOps workflow to accelerate analysis and automation, acting as the orchestrator accountable for the logic, security and quality of what ships
• Leverage automation and cloud provider APIs to solve key security challenges (e.g. IAM, CI/CD security, security audits, data protection, compliance validation)
• Apply your expertise in cloud security and continuous monitoring to understand risks, explain them in plain terms, and put mitigation techniques in place
• Develop and implement automated audits of code and cloud infrastructure to identify security flaws and compliance gaps (GDPR, PIPEDA, Law 25, PCI, etc.)
• Work hand in hand with development teams to secure their deployment pipelines
• 5+ years of experience in application security, cloud security or DevOps engineering
• Strong command of Python, Go or Bash
• Solid experience in operations automation and a good understanding of the DevOps approach
• Experience with at least one major cloud provider (AWS, Google, Azure), including its security services (IAM, KMS, VPC, security groups)
• Sound understanding of containerized environments and infrastructure as code (Kubernetes, Docker, Terraform)
• Strong comfort with AI-assisted development (Cursor, Claude)
• Autonomy, a sense of ownership and the ability to see projects through in a constantly changing environment
• A creative, solutions-oriented approach, team spirit and excellent communication skills

What will set you apart

• Experience with - or demonstrated strong interest in - designing AI agents for security or automation use cases
• Hands-on experience with a CNAPP platform (Wiz, Prisma Cloud, Orca or equivalent)
• A bachelor's degree in computer science or information security
• Certifications such as CKA, CKAD, CKS, DevSecOps Foundation, Continuous Testing Foundation or OSCP
• Experience with SSAE18 SOC 2 and ISO 27001

Life at Stingray

• A cool office in Montreal with the flexibility to work from home on Fridays
• Stingray café with breakfasts, lunches and snacks offered every day
• A subsidy for your OPUS card to make your commutes easier
• Shares purchase plan (with a contribution from Stingray)
• Full access to the Dialogue virtual healthcare platform
• Free fitness classes offered weekly
• Access to private consultations on nutrition and wellness
• Free language classes, training and access to the latest AI technologies and platforms to boost your productivity and creativity
• Summer hours
• Milestones celebrated with our loyalty program
• 5@7 and vibrant social events
• And much more!

We leverage AI-supported tools to assist with the initial review of applications. These tools do not replace human judgment - final decisions are made by our recruitment teams.

Montreal-based Stingray Group is a leading music, media and technology company with over 1,200 employees worldwide. Our offices are located in the Old Port of Montreal just minutes from the Lachine Canal bike path, a prime location for picnics or a jog at lunch time.

Stingray supports the principles of Employment Equity and is committed to ensuring our workforce is representative of the communities we serve and in which we operate. Women, Aboriginal peoples, persons with disabilities and visible minorities are encouraged to apply and to self-identify so we can work towards full representation of those groups within our company.