Security Developer (DevSecOps)

Stingray; Montreal (administrative region); Hybrid; CAD 110,000 - 140,000; Full time

Benefits offered by this job

WFH Fridays

Cafeteria with meals

Transit subsidy (OPUS)

Employee stock purchase plan

Digital health access

Fitness classes

Language and AI training

Summer hours

Vibrant social events

Job summary

Stingray is seeking a Security Developer (DevSecOps) to strengthen the security posture of its applications and automate alert remediation. You will design AI-assisted security assessments, automate audits, and collaborate with development teams to secure pipelines in a hybrid Montreal setting.

You’ll work with a team to implement cloud security, CI/CD security, and data protection while leveraging AI-enabled development tools.

Qualifications

• 5+ years of experience in application security, cloud security or DevOps engineering.
• Strong command of Python, Go or Bash.
• Experience with at least one major cloud provider and its security services (IAM, KMS, VPC).
• Solid understanding of containerised environments and IaC (Kubernetes, Docker, Terraform).
• Autonomy and ownership in a changing environment.
• Excellent communication skills.

Responsibilities

• Operate and improve CNAPP platform to detect, prioritise and track remediation of cloud and application security risks.
• Design, build and operate AI agents to automate continuous security assessment and remediation.
• Integrate AI-assisted development tools into the DevSecOps workflow as the orchestrator for security and quality.
• Leverage cloud provider APIs to solve security challenges (IAM, CI/CD security, data protection).
• Apply expertise in cloud security and continuous monitoring to explain risks clearly and mitigate them.
• Develop and implement automated audits of code and cloud infrastructure for security and compliance checks (GDPR, PIPEDA, PCI).
• Work with development teams to secure deployment pipelines.
• Perform risk modelling.

Skills

Python

Go

Bash

Cloud security

DevOps

AI-assisted development

Communication skills

Security experience (5+ yrs)

Education

Bachelor's degree in computer science or information security

Tools

Wiz

Prisma Cloud

Orca

Job description

At Stingray, creativity, collaboration and innovative technology are the pillars of our DNA. Are you ready to rock your career by joining a fast‑growing company and a team of music lovers in a stimulating and fun work environment?

You’ll join a team working to advance Stingray’s application security, one pipeline at a time. Your mandate: strengthen the security posture of our applications, automate the prioritisation and tracking of alert remediation, and equip our developers so they build in the right reflexes from the design stage. A role where you build as much as you advise.

We’re looking for a Security Developer (DevSecOps) with at least 5 years of experience in application or cloud security to round out our cybersecurity team. You’ll report to the Team Manager – Cybersecurity.

Your day-to-day

• Operate and improve our CNAPP platform to detect, prioritise and track the remediation of cloud and application security risks, and respond to security alerts and incidents
• Design, build and operate AI agents to automate continuous security assessment, alert triage and assisted remediation (development environments, pipelines and cloud infrastructure)
• Integrate AI‑assisted development tools (e.g. Cursor, Claude) into the DevSecOps workflow to accelerate analysis and automation, acting as the orchestrator accountable for the logic, security and quality of what ships
• Leverage automation and cloud provider APIs to solve key security challenges (e.g. IAM, CI/CD security, security audits, data protection, compliance validation)
• Apply your expertise in cloud security and continuous monitoring to understand risks, explain them in plain terms, and put mitigation techniques in place
• Develop and implement automated audits of code and cloud infrastructure to identify security flaws and compliance gaps (GDPR, PIPEDA, Law 25, PCI, etc.)
• Work hand in hand with development teams to secure their deployment pipelines
• Perform risk modelling

Your Qualifications

• 5+ years of experience in application security, cloud security or DevOps engineering
• Strong command of Python, Go or Bash
• Solid experience in operations automation and a good understanding of the DevOps approach
• Experience with at least one major cloud provider (AWS, Google, Azure), including its security services (IAM, KMS, VPC, security groups)
• Sound understanding of containerised environments and infrastructure as code (Kubernetes, Docker, Terraform)
• Strong comfort with AI‑assisted development (Cursor, Claude)
• Autonomy, a sense of ownership and the ability to see projects through in a constantly changing environment
• A creative, solutions-oriented approach, team spirit and excellent communication skills

What Will Set You Apart

• Experience with — or demonstrated strong interest in — designing AI agents for security or automation use cases
• Hands‑on experience with a CNAPP platform (Wiz, Prisma Cloud, Orca or equivalent)
• A bachelor’s degree in computer science or information security
• Certifications such as CKA, CKAD, CKS, DevSecOps Foundation, Continuous Testing Foundation or OSCP
• Experience with SSAE18 SOC 2 and ISO 27001

Life at Stingray

• A cool office in Montreal with the flexibility to work from home on Fridays
• Stingray café with breakfasts, lunches and snacks offered every day
• A subsidy for your OPUS card to make your commutes easier
• Shares purchase plan (with a contribution from Stingray)
• Full access to the Dialogue virtual healthcare platform
• Free fitness classes offered weekly
• Access to private consultations on nutrition and wellness
• Free language classes, training and access to the latest AI technologies and platforms to boost your productivity and creativity
• Summer hours
• Milestones celebrated with our loyalty program
• 5@7 and vibrant social events
• And much more!

We leverage AI‑supported tools to assist with the initial review of applications. These tools do not replace human judgment—final decisions are made by our recruitment teams.

Montreal‑based Stingray Group is a leading music, media and technology company with over 1,200 employees worldwide. Our offices are located in the Old Port of Montreal just minutes from the Lachine Canal bike path, a prime location for picnics or a jog at lunch time.

Stingray supports the principles of Employment Equity and is committed to ensuring our workforce is representative of the communities we serve and in which we operate. Women, Aboriginal peoples, persons with disabilities and visible minorities are encouraged to apply and to self‑identify so we can work towards full representation of those groups within our company.

Not the job for you? Go to jobs.stingray.com to consult other available positions and learn more about Stingray, we’re always on the lookout for new talent.

Share this opportunity