“SBOM tools” jobs in Canada – Page 2

No matching filters. Try another name.

Results

• 22d

  Principal Product Security Engineer

  Remote in Canada

  Remote

  

  Chainguard

  10+ YOEChainguard requires 10+ years in product or application security, deep secure architecture experience for cloud-native systems, and hands-on cloud and Kubernetes security knowledge. Candidates need compliance framework experience (SOC 2, ISO 27001, SLSA) and scripting skills in Go, Python or Shell.

  Kubernetes, Static analysis tools, Dynamic analysis tools, IaC scanners

  23d

  Software Engineer, Sustaining Automation

  Remote in Canada

  Remote

  

  Chainguard

  3+ YOECandidates need 3 to 5 years of software engineering experience shipping production systems, strong Go skills, and experience using AI or LLMs to generate and test code. They also need systems design skills, experience with developer tools or CLIs, container ecosystem knowledge, and strong written and remote communication skills.

  Go, Docker, Kubernetes, melange, apko, Wolfi

  1mo

  Senior Software Engineer, Containers

  Remote in Canada

  Remote

  

  Chainguard

  3+ YOECandidates need 3+ years building and operating paying-customer software, strong fundamentals in a systems language (Go preferred), and working knowledge of containers, OCI images, and Kubernetes. Daily use of agentic coding tools and excellent written English are expected.

  Kubernetes, Docker, Terraform, GCP, AWS, Sigstore

  1mo

  Staff Software Engineer, Containers

  Remote in Canada

  Remote

  

  Chainguard

  5+ YOEChainguard asks for 5+ years building software that paying customers use, including leading a multi-engineer project end to end. Candidates need strong Go and cloud infrastructure skills, deep knowledge of containers, registries and Kubernetes, and excellent written English.

  Go, Kubernetes, Docker, Terraform, Helm, Sigstore

• 23d

  AppSec Analyst

  Toronto, ON

  PP

  Patch & Permasearch

  5+ YOECandidates need 5+ years in application security or DevSecOps, hands-on work with Snyk, GitHub Advanced Security, JFrog and Akamai, and experience securing CI/CD pipelines. Working knowledge of AI security concepts and the ability to work across security, DevOps and development teams are also required.

  Snyk, GitHub Advanced Security, Dependabot, JFrog, Akamai, GitHub Actions

• 26d

  Chief Information Security Officer (CISO) / Directeur de la sécurité de l'information

  Remote in Canada

  Remote

  

  Insurity: Insurity is a leading provider of cloud-based software for insurance carriers, brokers, and MGAs.

  8+ YOEExecutive security leadership experience; Knowledge of HIPAA, SOC 2, ISO 27001, GDPR, NIST; Ability to lead major incidents and crisis response

  Cybersecurity, Computer science, Computer technology, Data protection, Implement ICT recovery system, Incident response

• 1mo

  Senior Software Developer - Form

  British Columbia

  $128k–$143k/yrHybridFull Time

  

  Safe Software

  7+ YOECandidates need a bachelor's degree in a related field, 7+ years of professional development experience including technical leadership, advanced C++ and Python skills, and threat modeling and CVSS scoring experience. Security tooling experience such as fuzzing, sanitizers and SAST/DAST is also required.

  C++, Python, FME Form, GitHub Copilot, Claude Code, Qt Widgets

• 1mo

  AI Solutions Engineer (Senior / Principal)

  Toronto, ON

  HybridFull Time, Contract

  

  RAVL

  Candidates need hands-on Vertex AI and GKE or Cloud Run experience, plus strong DevSecOps platform skills. Senior candidates must also show they have led platform architecture and mentored engineers in regulated environments.

  Vertex AI, Gemini, Agent Builder, Vector Search, GKE, Cloud Run

• 1mo

  Director, Partner Solution Engineer

  Remote in Canada

  RemoteFull Time

  

  Docker

  8+ YOE5+ MgmtCandidates need 8+ years leading technical partner, pre-sales or solutions teams, including 5+ years in management. Strong knowledge of cloud partner ecosystems, containers, CI/CD and software supply chain security is required.

  Salesforce, Looker, MindTickle, Docker, Kubernetes

  1mo

  Manager, Engineering, Secure Build and SCS Services (East Coast or England Preferred)

  Remote in Canada

  RemoteFull Time

  

  Docker

  8+ YOE5+ MgmtDocker needs a leader with 5+ years managing engineering teams and 8+ years of hands-on backend or infrastructure experience. Candidates need distributed-systems and CI or build-system knowledge, plus interest in software supply-chain security.

  Kafka, Spanner, Datomic, Go, Clojure, BuildKit

  1mo

  Senior Supply Chain Security Engineer (East Coast Preferred)

  Remote in Canada

  RemoteFull Time

  

  Docker

  Candidates need strong production experience with containers, Linux and Kubernetes, plus Helm chart maintenance and container security knowledge. They must also have practical Go or similar programming skills and experience maintaining software they did not originate.

  Docker, Kubernetes, Helm, GitHub, Go, YAML

• 1mo

  Senior Software Engineer, Security Factory: Code Security

  Remote in Canada

  Remote

  

  GitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.

  Candidates need substantial production experience in Go or Rust, familiarity with package managers such as npm, Maven, pip, Bundler or Cargo, and application security knowledge including CWE and OWASP. Experience building LLM tooling and evaluating AI-driven detection is also required.

  Docker, GitLab CI, Ruby, Python, npm, Maven

• 1mo

  Senior Engineer - Penetration Testing

  Canada

  

  Finite State

  7+ YOECandidates need 7+ years of embedded, IoT, ICS/OT or automotive security experience, hardware debugging and PCB rework skills, and firmware reverse engineering skills with Ghidra or Binary Ninja. Strong written communication and Python or Bash scripting are also required.

  Ghidra, Binary Ninja, Logic analyzer, Soldering and rework station, Programmers

  1mo

  Senior Engineer - Penetration Testing

  Canada

  

  Finite State

  7+ YOECandidates need 7+ years of embedded, IoT, ICS/OT or automotive security experience, hardware debugging and PCB rework skills, and firmware reverse engineering skills with Ghidra or Binary Ninja. Strong written communication and Python or Bash scripting are also required.

  Ghidra, Binary Ninja, Logic analyzer, Soldering and rework station, Programmers

  1mo

  Senior Engineer - Penetration Testing

  Canada

  

  Finite State

  7+ YOECandidates need 7+ years of embedded, IoT, ICS/OT or automotive security experience, hardware debugging and PCB rework skills, and firmware reverse engineering skills with Ghidra or Binary Ninja. Strong written communication and Python or Bash scripting are also required.

  Ghidra, Binary Ninja, Logic analyzer, Soldering and rework station, Programmers

• 1mo

  Technical Success Manager

  Ottawa, ON

  Full Time

  

  Work in Ottawa: Invest Ottawa is a non-profit, partnership organization that operates on an annual budget that comes from a variety of sources including: municipal,…

  5+ YOECandidates need 5+ years in a customer-facing technical role and experience running programs for many customers at once. Working knowledge of developer tools, application security concepts, and DevSecOps is expected, along with strong communication and organization skills.

  GitHub, Jira, Jenkins, VS Code, Claude, Gemini

• 1mo

  Senior Product Cybersecurity Specialist

  Burnaby, BC

  Full Time

  V

  Verathon

  8+ YOECandidates need a bachelor's degree in an engineering discipline (a master's is preferred) and 8+ years in cybersecurity or product security engineering, at least 5 of them on connected or regulated products. Required expertise includes medical device cybersecurity regulation (FDA, IEC 81001-5-1, AAMI SW96, IEC 62443, EU MDR), threat modeling, regulatory submissions and SBOM management.

  SBOM tooling, SPDX, CycloneDX, penetration testing tools

• 1mo

  Automation and Build Developer II

  Burnaby, BC

  $75k–$107k/yrFull Time

  

  LMI Technologies

  5+ YOECandidates need 5+ years as a build, release or automation developer with a strong CI/CD focus, strong Python and practical C++ skills, and experience with GCC cross-compilation, Linux build systems and Docker build environments. A bachelor's degree or equivalent experience and familiarity with Git and a CI/CD platform are required.

  Bamboo, Bitbucket Pipelines, Docker, Git, GCC, MSVC

• 1mo

  Principal AI Cloud Engineer

  Toronto, ON

  Full Time

  

  Bank of Montreal

  7+ YOECandidates need a degree in computer science or engineering, 7+ years building large cloud systems and 5+ years on Azure or AWS. They need strong hands-on skills in Kubernetes, infrastructure-as-code, GPU clusters, MLOps and LLMOps, plus Python and Go or TypeScript.

  Kubernetes, Terraform, Bicep, Azure, AWS, Prometheus

• 1mo

  Technical Manager – Product Security, Vulnerability Management & Software Assurance

  Ottawa, ON

  Full Time

  LO

  Lumentum Ottawa ULC

  Candidates need a bachelor's degree in computer science, engineering, cybersecurity or a related field, plus experience leading product or application security or cloud security teams. They should know CVE, CVSS, CWE, SBOM, VEX and software supply-chain security, and have worked with SCA tools such as Black Duck.

  Black Duck, CodeQL, Coverity, GCP, Cloud Run, Cloud KMS

• 1mo

  Software Governance Specialist

  Ottawa, ON

  $69k–$111k/yrFull Time

  CC

  Ciena Canada ULC

  5+ YOECandidates need at least five years of open source licensing experience and an understanding of commercial licensing models. They also need experience in software development environments, awareness of AI governance, and strong analytical and communication skills.

  SBOM tools, software composition analysis tools

• 1mo

  Staff Security Engineer

  Remote in Canada

  RemoteFull Time

  

  Redpanda Data

  7+ YOECandidates need 7+ years in application or product security and the ability to review systems code, ideally C++ or Rust. They should have experience leading threat modeling, running AppSec tools and securing the software supply chain.

  SAST tools, SCA tools, secret scanning tools, DAST tools, libFuzzer, AFL++

• 1mo

  Lead Product Security

  Remote in Canada

  Remote

  

  Black Duck Software, Inc.

  8+ YOECandidates need 8+ years in product or application security, hands-on design review and threat modeling skills, and experience building a security champions or enablement program. A bachelor's degree or equivalent practical experience is required.

  Black Duck SCA, Coverity, GitGuardian, Jira

• 1mo

  Senior Data Analyst

  Remote in Canada

  RemoteFull Time

  

  Sonatype

  5+ YOECandidates need 5+ years in data analysis, BI or product analytics at a SaaS or tech company, with telemetry data experience required. Advanced SQL, Python, Databricks and a visualization tool such as Looker are needed, and the role must be based in Canada (excluding Quebec).

  Databricks, PySpark, Looker, SQL, Python, AWS S3

17 companies