No matching filters. Try another name.
Lightspeed Commerce, Inc.
Candidates need hands-on application or product security experience in cloud environments, deep knowledge of OWASP Top 10 flaws, and experience tuning CI/CD scanners. They also need threat modeling skills, fluency in Python, Go, JavaScript or Java, and strong communication skills.
SAST tools, DAST tools, SCA tools, CI/CD pipelines
Safe Software
3+ YOESafe Software needs 3+ years in product or application security, solid knowledge of vulnerability classes and tools like SAST, DAST and SCA, strong Python skills, Agentic AI experience and clear communication with technical and non-technical audiences.
Python, SAST, DAST, SCA, FME
Work in Ottawa: Invest Ottawa is a non-profit, partnership organization that operates on an annual budget that comes from a variety of sources including: municipal,…
5+ YOECandidates need 5+ years in a customer-facing technical role and experience running programs for many customers at once. Working knowledge of developer tools, application security concepts, and DevSecOps is expected, along with strong communication and organization skills.
GitHub, Jira, Jenkins, VS Code, Claude, Gemini
nesto
5+ YOECandidates need 5+ years on infrastructure or security teams and 5+ years of development experience, ideally in GoLang or TypeScript/JS. Strong cloud security knowledge, Kubernetes and infrastructure-as-code skills, and fluency in English and French are required.
Kubernetes, Terraform, Pulumi, Helm, Snyk, Tenable
Halliburton: With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout…
5+ YOECandidates need 5+ years in cybersecurity, GRC, IT audit or risk management, plus a bachelor's degree or equivalent experience. They must know security controls, cloud security and at least one compliance framework, and write and explain risk clearly.
ServiceNow GRC, Archer
Halliburton: With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout…
3+ YOECandidates need an undergraduate degree in Computer Science or a related field and at least three years in software development, application security, cybersecurity, DevSecOps or cloud security. They also need secure development knowledge, experience fixing software vulnerabilities, and clear communication with engineering teams.
GitLab, Azure, AWS, Terraform, SAST tools, DAST tools
Purolator: is a leading integrated freight, package and logistics solutions provider.
5+ YOECandidates need 5+ years in application security or secure software development, hands-on experience with SAST, SCA, DAST and secret scanning tools, and solid knowledge of OWASP Top 10 and threat modeling. Strong English communication and eligibility for a Reliability Security Clearance are required.
SAST tools, SCA tools, DAST tools, Secret scanning tools, CI/CD pipelines, AWS
Paymentus: Paymentus® (NYSE: PAY) is the leading provider of real-time, cloud-based billing, payment, and customer engagement solutions.
8+ YOE3+ MgmtCandidates need a technical degree or equivalent experience, 8+ years in software or security engineering, and 3+ years leading teams. Hands-on skills in Java, NodeJS, Python or Golang, public cloud security, Kubernetes, CI/CD security and API and LLM application security are required.
Kubernetes, Cloudflare, Fastly, Spring, Tomcat, JBoss
FISPAN
5+ YOECandidates need 5+ years in security analysis, penetration testing or incident response, with hands-on exploitation skills and the ability to read raw logs. OSCP (or equivalent) is required or in progress, and strong English communication is essential.
Splunk, Burp Suite, Metasploit, Nmap, Cobalt Strike, Nessus
CAAT Pension Plan: CAAT Pension Plan provides workplaces with lifetime retirement income plans for employees.
8+ YOECandidates need at least eight years of practical cybersecurity experience in application security, vulnerability management, incident response and cloud security. A computer science degree, a relevant security certification, and knowledge of ISO 27001, NIST, CIS and MITRE ATT&CK are also required.
Splunk Enterprise Security, Azure Sentinel, CrowdStrike, Rapid7 InsightVM, Tenable, Imperva WAF
Interac Corp.: Interac se fait le champion d’une culture organisationnelle et d’une citoyenneté d’entreprise fondées sur les principes de responsabilité, de…
5+ YOECandidates need 5+ years of application security or software security experience, preferably in FinTech, SaaS or cloud-native settings. They need hands-on skill with security testing tools, DevSecOps practices, at least one programming language, and cloud security knowledge.
SAST, SCA, DAST, CI/CD pipelines, container security platforms
DataRobot, Inc.
8+ YOECandidates need 8+ years in information security, mostly in product security or AppSec, plus deep knowledge of FedRAMP, NIST 800-53 and the DoD Cloud SRG. They must write Python or Go, understand Linux containers well, and have hands-on experience with Semgrep, Trivy and Burp Suite. A bachelor's or master's degree in a related field, or equivalent experience, is required.
Semgrep, Trivy, Burp Suite, Kubernetes, Python, Go
GitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.
Candidates need experience delivering secure enterprise architectures, migrating CI/CD and application security tooling, and integrating security controls into pipelines. Knowledge of frameworks like ISO 27001, NIST 800-53, SOC 2 and FedRAMP, plus Terraform, Ansible and GitLab security scanners, is expected.
GitLab, Jenkins, Snyk, Checkmarx, Veracode, SonarQube
Redpanda Data
7+ YOECandidates need 7+ years in application or product security and the ability to review systems code, ideally C++ or Rust. They should have experience leading threat modeling, running AppSec tools and securing the software supply chain.
SAST tools, SCA tools, secret scanning tools, DAST tools, libFuzzer, AFL++
Black Duck Software, Inc.
Candidates need hands-on Google Cloud experience and deep Kubernetes skills. They also need cloud networking and security knowledge, CI/CD and scripting skills, and a bachelor's degree or equivalent experience.
Google Cloud Platform, Kubernetes, Terraform, Helm, ArgoCD, GitHub Actions
Black Duck Software, Inc.
8+ YOECandidates need 8+ years in product or application security, hands-on design review and threat modeling skills, and experience building a security champions or enablement program. A bachelor's degree or equivalent practical experience is required.
Black Duck SCA, Coverity, GitGuardian, Jira
Later
5+ YOECandidates need 5-7+ years as a security or software engineer with a strong security focus, plus hands-on experience with identity and access management and production-grade systems. Experience with application and cloud security, secure CI/CD, and compliance frameworks such as SOC 2 and ISO 27001 is also required.
AWS Security Hub, Azure Security Center, GCP Security Command Center, Terraform, CloudFormation, SIEM
Relay: Relay is a financial technology company and is not an FDIC-insured bank.
5+ YOECandidates need 5 to 6 years of application security or penetration testing experience, production software shipping experience, deep knowledge of OWASP Top 10, and daily use of AI tools for development. Strong communication and developer mentorship skills are also expected.
Datadog, Burp Suite, Claude Code, Cursor, TypeScript, Node.js
Telesat: Continuously innovating to meet the connectivity demands of the future, Telesat Lightspeed, the company’s Low Earth Orbit (LEO) satellite network,…
10+ YOECandidates need 10+ years in cybersecurity, system architecture or embedded security, ideally in aerospace, satellite or telecom. They must know cryptography, NIST 800-53, ISO 27001, container and PKI security, and must be able to obtain Controlled Goods Program clearance in Canada.
SIEM platforms, Kubernetes, PKI systems, SAST tools, DAST tools, SCA tools
Smile Digital Health: Smile Digital Health (doing business as Smile CDR Inc.) specializes in delivering fast, secure, compliant data infrastructures as a service to…
7+ YOESmile Digital Health needs candidates with 7+ years of cloud security experience, mainly on Microsoft Azure, and hands-on work with Prisma Cloud and Microsoft Defender. Candidates also need CI/CD security tooling, Terraform or Ansible, container security, RBAC design, and knowledge of healthcare compliance frameworks.
Prisma Cloud, Microsoft Defender for Cloud, Azure Key Vault, Terraform, Ansible, Kubernetes
BeyondTrust
4+ YOECandidates need 4+ years in application security, product security, DevSecOps or security engineering, including hands-on work with security tools in CI/CD pipelines. BeyondTrust also expects experience with GitHub-integrated scanning tools, AI-powered code analysis platforms, scripting and policy-as-code.
GitHub Advanced Security, CodeQL, Dependabot, Wiz CLI, Claude Code Security, Codex Security
22 companies