Senior Software Engineer - Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Software Engineer - Security based in Canada.

As a Senior Software Engineer specializing in Security, you will play a key role in strengthening cloud-native security and protecting the software infrastructure supply chain. You will design and implement security solutions across containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud infrastructure. Working at the intersection of software engineering and cybersecurity, you will help develop hardened container images, automate security controls, and address vulnerabilities at scale. You will collaborate closely with engineering and security teams to improve infrastructure resilience and establish secure development practices. You will also contribute to innovative security automation initiatives involving artificial intelligence, machine learning, and large language models. This is an opportunity to take ownership of high-impact technical initiatives while helping mature security practices in a complex, cloud-native environment.

Design, develop, and maintain processes for building and managing hardened container base images for development and production environments, minimizing attack surfaces and strengthening overall security. Provide hands-on engineering support for securing Kubernetes clusters and containerized workloads, including runtime security, network policies, and admission controllers. Strengthen the end-to-end software and infrastructure supply chain by securing CI/CD tools, Infrastructure as Code (IaC) templates, container base images, Helm charts, and third-party dependencies. Develop, implement, and continuously improve security automation solutions, including custom tools and scripts that streamline security operations and vulnerability remediation. Identify, assess, and triage vulnerabilities discovered through application security reviews, internal penetration testing, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). Lead vulnerability prioritization and remediation initiatives in collaboration with engineering teams, ensuring risks are addressed effectively and within appropriate timelines. Develop, review, and commit code patches to remediate security vulnerabilities, particularly those affecting third-party and open-source software dependencies. Contribute to AI-driven security engineering initiatives, exploring the use of machine learning, large language models (LLMs), and Model Context Protocol (MCP) techniques for automated vulnerability remediation and intelligent security alert grouping. Promote security engineering best practices across development and infrastructure teams, helping improve the overall security posture of cloud-native environments.

Requirements:

Bachelor's degree or post-secondary qualification in Computer Science, Information Security, Software Engineering, or a related discipline, or equivalent practical experience. Extensive hands-on experience in container security, including designing, implementing, and maintaining hardened container images and securing Kubernetes clusters. Strong practical knowledge of Kubernetes and containerized environments, including workload protection, runtime security, network policies, and admission control mechanisms. Experience with Infrastructure as Code (IaC) tools, particularly Terraform, for provisioning infrastructure and implementing security controls. Proven experience developing and operating security automation solutions, with strong programming skills in Go and/or Python. Advanced expertise with GitHub and CI/CD platforms such as GitHub Actions and Jenkins, including their architecture, configuration, and security engineering practices. Expert-level proficiency in Software Composition Analysis (SCA), with demonstrated experience identifying and remediating third-party and open-source dependency vulnerabilities at scale. Direct experience or strong conceptual understanding of applying AI, machine learning, large language models (LLMs), or MCP techniques to cybersecurity challenges, including automated vulnerability fixing and intelligent alert management. Strong familiarity with cloud platforms, particularly AWS and Azure, including their security services and container orchestration capabilities. Excellent problem-solving and analytical skills, with the ability to investigate complex security issues and develop practical engineering solutions. Strong collaboration and communication skills, with the ability to work effectively with security specialists, software engineers, and cross-functional stakeholders. Ability to take ownership of technical initiatives, manage priorities independently, and deliver high-quality solutions in a fast-paced engineering environment.

Nice to Have:

Experience working with Artifactory/JFrog and related software artifact management solutions. Advanced knowledge of application security principles and the OWASP Top 10. Familiarity with software supply chain security frameworks and standards such as SLSA. Experience implementing scalable security automation and vulnerability management practices within large engineering environments.

Benefits:

Competitive hourly contract rate of CAD 65–70/hour (T4), as specified in the original compensation details. Fully remote working arrangement, with the role based in Toronto, Canada. Full-time contract opportunity with a workload of approximately 40 hours per week. Initial contract duration of 5+ months. Opportunity to work on strategic security engineering initiatives with significant technical impact. Exposure to advanced cloud-native security technologies, container security, Kubernetes, and infrastructure automation. Opportunity to contribute to emerging AI/ML/LLM-driven cybersecurity solutions. Hands-on experience addressing complex infrastructure and software supply chain security challenges. Collaborative and inclusive working environment that values diversity and equal opportunities.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

 

 

#LI-CL1