Posted 8 months ago
Security Engineer
@ Querentia Inc.
Toronto, Ontario
Overview
Querentia Inc. is hiring a contract Security Engineer (DevSecOps / Cloud) to support a Government of Canada client in delivering secure cloud-based applications. The work covers CI/CD security, automated scanning controls and Security Assessment & Authorization (SA&A) activities, on a remote, full-time exclusive 6-month contract at 37.5 hours per week, with a mandatory Secret or Top-Secret clearance.
Responsibilities:
- Design and implement secure CI/CD pipelines with integrated security controls
- Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security)
- Lead and support SA&A activities for cloud-based applications
- Ensure compliance with Government of Canada security frameworks and standards
- Identify and remediate application and infrastructure vulnerabilities
Requirements summary:
- Bachelor's degree or College Diploma in a relevant discipline
- 5+ years in a software development or engineering environment
- Two SA&A completions for cloud applications within the last 5 years (GOC experience required)
- 2+ years implementing automated security scanning within CI/CD pipelines
- Active Secret or Top-Secret clearance (mandatory)
Tools & skills
Source and dates
Source type not verified · jsonld
- Employer posting date
- 2026-03-25
- First seen by our source
- 2026-10-26
- Source record updated
- 2026-11-02
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 5+ years |
| Hours per week | 37.5 |
| Travel | air: none · ground: none |
| Work setting | Home |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | Secret clearance, Top Secret clearance |
| Education | Bachelor’s degree (required), College diploma (required) |
| Fields of study | Computer Science, Information Technology, Engineering |
| Security clearance | Secret |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Querentia Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 331 |
Job Title: Security Engineer (DevSecOps / Cloud)
Location: Remote
Duration: 6-Month Contract (Full-Time – 37.5 hours/week, Exclusive)
Clearance: Secret or Top-Secret (Mandatory)
Role Overview
We are seeking a skilled Security Engineer to support a Government of Canada (GOC) client in delivering secure cloud-based applications. This role focuses on embedding security into the software development lifecycle, with a strong emphasis on CI/CD security, automated controls, and compliance with federal security standards.
The ideal candidate will have hands-on experience with Security Assessment & Authorization (SA&A) processes within the GOC environment and a strong background in DevSecOps practices.
Key Responsibilities
• Design and implement secure CI/CD pipelines with integrated security controls
• Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security, etc.)
• Lead and support Security Assessment & Authorization (SA&A) activities for cloud-based applications
• Ensure compliance with Government of Canada security frameworks, policies, and standards
• Identify, assess, and remediate application and infrastructure vulnerabilities
• Apply modern security engineering practices across the SDLC
• Collaborate with development and DevOps teams to embed DevSecOps best practices
• Support threat modeling, risk assessments, and security reviews for new and existing systems
Mandatory Requirements
• Bachelor ’ s degree or College Diploma in a relevant discipline
• Minimum 5+ years of experience in a software development / engineering environment
• Strong hands-on experience with CI/CD pipelines and DevSecOps practices
• Proven experience completing Security Assessment & Authorization (SA&A) for at least two (2) cloud-based applications within the last 5 years ( GOC experience required )
• Minimum 2+ years of recent experience implementing automated security scanning and controls within CI/CD pipelines
• Experience applying modern application security principles to applications released within the past 3 years
• Active Secret or Top-Secret Clearance (Mandatory)
Additional Requirements
• Prior experience working within Government of Canada (GOC) environments
• Strong knowledge of cloud security, risk management, and compliance frameworks
• Ability to commit to a full-time (37.5 hours/week), exclusive contract
• Strong communication and stakeholder collaboration skills
Nice to Have
• Certifications such as CISSP, CISM, CEH, AWS/Azure Security
• Experience with Infrastructure as Code (IaC) and secure configuration management
• Familiarity with containerization and Kubernetes security
• Experience with security tools like SonarQube, Snyk, Checkmarx, Prisma Cloud , etc.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.