Posted last month
Senior DevSecOps & AI Security Engineer
@ Querentia Inc.
Toronto, Ontario
Overview
Querentia Inc. is hiring a Senior DevSecOps & AI Security Engineer on a contract basis to secure applications, cloud-native platforms, CI/CD pipelines and AI/LLM solutions. The work covers penetration testing, secure code review, vulnerability management, Azure and container security, and Python security automation.
Responsibilities:
- Penetration testing of web, API, mobile, cloud and AI applications
- Secure code reviews and validation of SAST, DAST, SCA and container findings
- Prompt injection and jailbreak testing of AI/LLM applications
- Security controls in CI/CD pipelines and Python-based security automation
- Vulnerability prioritization and remediation with engineering teams
Requirements summary:
- 6+ years in application security, DevSecOps, offensive security or security engineering
- Bachelor's or Master's in Computer Science, Information Security, Cybersecurity or related field
- Experience securing cloud-native and AI-enabled applications
- Strong Python scripting and security automation skills
- 2-3 certifications required from CISSP, CSSLP, AZ-500, Certified DevSecOps Professional, or Azure/AWS cloud security
Tools & skills
Source and dates
Source type not verified · jsonld
- Employer posting date
- 2026-09-23
- First seen by our source
- 2026-10-26
- Source record updated
- 2026-11-05
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 6+ years |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Licences & certifications | CISSP, CSSLP, AZ-500, Certified DevSecOps Professional, Azure/AWS cloud security certification |
| Education | Bachelor’s degree (required), Master’s degree (preferred) |
| Fields of study | Computer Science, Information Security, Cybersecurity |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Querentia Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 331 |
Senior DevSecOps & AI Security Engineer
Role Overview
We are seeking an experienced Senior DevSecOps & AI Security Engineer to strengthen security across applications, cloud-native platforms, DevSecOps pipelines, and AI/LLM-based solutions . The role focuses on application security, offensive security testing, vulnerability management, secure code reviews, cloud security, and emerging AI security practices.
Primary Skills
•
Application Security - SAST, DAST, Secure Code Review
•
Penetration Testing - Web, API, Mobile
•
AI/LLM Security - Prompt Injection, Jailbreak & Model Security
•
DevSecOps & CI/CD Security
•
Vulnerability Management & Remediation
•
Security Automation using Python
Secondary Skills
•
Azure Cloud Security
•
Container & Kubernetes Security
•
SCA & Open-Source Security
•
GitHub Security Controls
•
Threat Modeling & Risk Assessment
•
Security Governance & Developer Enablement
Key Responsibilities
Security Assessment & Testing
•
Perform penetration testing across web, API, mobile, cloud-native, and AI-powered applications .
•
Conduct secure code reviews and identify application security weaknesses.
•
Validate findings from SAST, DAST, SCA, and container security tools .
•
Perform vulnerability analysis, root-cause investigation, and remediation validation.
AI Security
•
Assess AI/LLM applications for security vulnerabilities and misuse scenarios.
•
Conduct prompt injection, manipulation, and jailbreak testing.
•
Evaluate AI deployment architectures and recommend appropriate security controls.
•
Support secure AI adoption across enterprise platforms.
DevSecOps & Automation
•
Integrate security controls into CI/CD pipelines and deployment workflows.
•
Implement shift-left security practices.
•
Automate security validation and reporting using Python .
•
Optimize vulnerability assessment and remediation workflows.
•
Enhance security monitoring and policy enforcement across development environments.
Cloud & Container Security
•
Perform Azure cloud security assessments .
•
Review Kubernetes and containerized workloads for security risks.
•
Analyze container images and deployment configurations.
•
Recommend cloud-native security practices and remediation actions.
Vulnerability Management & Governance
•
Review and validate vulnerabilities identified by enterprise security tools.
•
Prioritize findings based on exploitability, business risk, and operational impact .
•
Drive remediation with engineering teams and verify effectiveness.
•
Support security governance, compliance, and audit activities.
Stakeholder Engagement
•
Collaborate with development, DevOps, architecture, and product teams .
•
Provide guidance on secure coding and vulnerability remediation.
•
Mentor engineering teams on security-first development.
•
Present security findings and recommendations to technical and business stakeholders.
Required Qualifications
•
Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or related field .
•
6+ years of experience in Application Security, DevSecOps, Offensive Security, or Security Engineering.
•
Strong understanding of SDLC, SSDLC, DevSecOps, and MLOps .
•
Hands-on experience with penetration testing, secure code reviews, and vulnerability management.
•
Experience securing cloud-native and AI-enabled applications .
•
Strong Python scripting and security automation experience.
Certifications
Any 2-3 certifications mandatory:
•
CISSP
•
CSSLP
•
Microsoft Azure Security Engineer ( AZ-500 )
•
Certified DevSecOps Professional
•
Cloud Security Certifications - Azure/AWS
Journal
Only you can see this. Kept on this device, and in your account when you sign in.