“SAST platforms” jobs in Canada – Page 3

No matching filters. Try another name.

Results

• 1mo

  Staff Software Engineer, Security Factory: Static Analysis

  Remote in Canada

  Remote

  

  GitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.

  Candidates need extensive production experience in Rust, Go or a similar systems language, plus deep static analysis and application security knowledge. The posting also asks for experience building LLM tooling and guiding teams through architecture work.

  Docker, Rust, Go, Ruby

  1mo

  Senior Software Engineer, Security Factory: Code Security

  Remote in Canada

  Remote

  

  GitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.

  Candidates need substantial production experience in Go or Rust, familiarity with package managers such as npm, Maven, pip, Bundler or Cargo, and application security knowledge including CWE and OWASP. Experience building LLM tooling and evaluating AI-driven detection is also required.

  Docker, GitLab CI, Ruby, Python, npm, Maven

  1mo

  Senior Professional Services Technical Architect - Security

  Remote in Canada

  Remote

  

  GitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.

  Candidates need experience delivering secure enterprise architectures, migrating CI/CD and application security tooling, and integrating security controls into pipelines. Knowledge of frameworks like ISO 27001, NIST 800-53, SOC 2 and FedRAMP, plus Terraform, Ansible and GitLab security scanners, is expected.

  GitLab, Jenkins, Snyk, Checkmarx, Veracode, SonarQube

• 1mo

  Bilingual Senior Specialist, Security Applications (AppSec)

  Montréal, QC +2

  

  CMHC - SCHL

  7+ YOECMHC - SCHL needs at least 7 years of application security experience, a bachelor's degree or equivalent, and strong English and French communication. Candidates should hold a security certification such as CSSLP or CISSP, or a recognized equivalent.

  CI/CD pipelines

• 1mo

  Enterprise Architect, AI Engineering – Security & Compliance

  Vaughan, ON +1

  Full Time

  K

  KPMG

  Candidates need a university degree in a technical discipline and significant enterprise or cloud architecture experience. Strong knowledge of Azure, secure-by-design, DevSecOps and NIST or ISO frameworks is required, along with clear communication to senior stakeholders.

  Microsoft Azure, Entra ID, Key Vault, Application Gateway, Azure Front Door, Kubernetes

• 1mo

  Platform Engineering Manager

  Toronto, ON

  $120k–$130k/yrRemoteFull Time

  

  WCG International Consultants Ltd.

  7+ YOE3+ MgmtCandidates need a bachelor's degree in a technical field, 7+ years of cloud or DevOps experience and 3+ years of leadership. Strong Azure skills, working AWS knowledge, Infrastructure as Code and DevSecOps experience are essential.

  Azure, AWS, Terraform, Bicep, ARM, Kubernetes

• 1mo

  Senior Engineer, Application Security

  Calgary, AB

  RemoteFull Time

  

  Lightspeed Commerce, Inc.

  Candidates need hands-on application or product security experience in cloud environments, deep knowledge of OWASP Top 10 flaws, and experience tuning CI/CD scanners. They also need threat modeling skills, fluency in Python, Go, JavaScript or Java, and strong communication skills.

  SAST tools, DAST tools, SCA tools, CI/CD pipelines

• 1mo

  Product Security Specialist II

  Quebec

  $102k–$115k/yrRemoteFull Time

  

  Safe Software

  3+ YOESafe Software needs 3+ years in product or application security, solid knowledge of vulnerability classes and tools like SAST, DAST and SCA, strong Python skills, Agentic AI experience and clear communication with technical and non-technical audiences.

  Python, SAST, DAST, SCA, FME

• 1mo

  Senior/Staff Engineer, Application & Product Security

  Waterloo, ON

  RemoteFull Time

  GT

  Grow Therapy

  6+ YOECandidates need 6+ years in application or product security, coding skills to automate security work, and hands-on experience with microservice architectures. They must read real source code, prioritize by risk, and work well with product and engineering teams.

  SAST, DAST, SBOM

• 1mo

  Technical Success Manager

  Ottawa, ON

  Full Time

  

  Work in Ottawa: Invest Ottawa is a non-profit, partnership organization that operates on an annual budget that comes from a variety of sources including: municipal,…

  5+ YOECandidates need 5+ years in a customer-facing technical role and experience running programs for many customers at once. Working knowledge of developer tools, application security concepts, and DevSecOps is expected, along with strong communication and organization skills.

  GitHub, Jira, Jenkins, VS Code, Claude, Gemini

• 1mo

  Senior Security Developer

  Remote in Canada

  RemoteFull Time

  

  nesto

  5+ YOECandidates need 5+ years on infrastructure or security teams and 5+ years of development experience, ideally in GoLang or TypeScript/JS. Strong cloud security knowledge, Kubernetes and infrastructure-as-code skills, and fluency in English and French are required.

  Kubernetes, Terraform, Pulumi, Helm, Snyk, Tenable

• 1mo

  Senior Cybersecurity and Compliance Analyst - Landmark

  Calgary, AB

  

  Halliburton: With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout…

  5+ YOECandidates need 5+ years in cybersecurity, GRC, IT audit or risk management, plus a bachelor's degree or equivalent experience. They must know security controls, cloud security and at least one compliance framework, and write and explain risk clearly.

  ServiceNow GRC, Archer

  1mo

  Application Security Engineer (senior - principal) Landmark

  Calgary, AB

  

  Halliburton: With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout…

  3+ YOECandidates need an undergraduate degree in Computer Science or a related field and at least three years in software development, application security, cybersecurity, DevSecOps or cloud security. They also need secure development knowledge, experience fixing software vulnerabilities, and clear communication with engineering teams.

  GitLab, Azure, AWS, Terraform, SAST tools, DAST tools

• 1mo

  Automation and Build Developer II

  Burnaby, BC

  $75k–$107k/yrFull Time

  

  LMI Technologies

  5+ YOECandidates need 5+ years as a build, release or automation developer with a strong CI/CD focus, strong Python and practical C++ skills, and experience with GCC cross-compilation, Linux build systems and Docker build environments. A bachelor's degree or equivalent experience and familiarity with Git and a CI/CD platform are required.

  Bamboo, Bitbucket Pipelines, Docker, Git, GCC, MSVC

• 1mo

  Manager Platform Security

  Richmond Hill, ON

  Full Time

  

  Paymentus: Paymentus® (NYSE: PAY) is the leading provider of real-time, cloud-based billing, payment, and customer engagement solutions.

  8+ YOE3+ MgmtCandidates need a technical degree or equivalent experience, 8+ years in software or security engineering, and 3+ years leading teams. Hands-on skills in Java, NodeJS, Python or Golang, public cloud security, Kubernetes, CI/CD security and API and LLM application security are required.

  Kubernetes, Cloudflare, Fastly, Spring, Tomcat, JBoss

• 1mo

  Senior Security Engineer

  Vancouver, BC

  $130k–$160k/yrOn-siteFull Time

  

  FISPAN

  5+ YOECandidates need 5+ years in security analysis, penetration testing or incident response, with hands-on exploitation skills and the ability to read raw logs. OSCP (or equivalent) is required or in progress, and strong English communication is essential.

  Splunk, Burp Suite, Metasploit, Nmap, Cobalt Strike, Nessus

• 1mo

  Member of Technical Staff - Cloud Operations

  Ontario

  Full Time

  CW

  Canada Wind River

  8+ YOECandidates need 8+ years of cloud, infrastructure or DevOps experience, a relevant degree or equivalent practical experience, and hands-on skill with AWS, Azure or GCP. Strong Linux administration, networking, cloud security and Infrastructure as Code skills are also required.

  Terraform, OpenTofu, Terragrunt, AWS CDK, CloudFormation, GitLab

• 1mo

  Senior Cyber Security Engineer

  Toronto, ON

  HybridFull Time

  

  CAAT Pension Plan: CAAT Pension Plan provides workplaces with lifetime retirement income plans for employees.

  8+ YOECandidates need at least eight years of practical cybersecurity experience in application security, vulnerability management, incident response and cloud security. A computer science degree, a relevant security certification, and knowledge of ISO 27001, NIST, CIS and MITRE ATT&CK are also required.

  Splunk Enterprise Security, Azure Sentinel, CrowdStrike, Rapid7 InsightVM, Tenable, Imperva WAF

• 1mo

  Security Specialist

  Toronto, ON

  Full Time

  CI

  CI Investments Inc.

  5+ YOECandidates need five or more years of hands-on security experience, including leading investigations, vulnerability management and application security testing. They should also hold CISSP or an equivalent certification and be able to advise on controls and write clear risk documentation.

  CrowdStrike, Splunk, ExtraHop, Darktrace, Qualys, Tenable

• 1mo

  Application Security, Senior Specialist

  Toronto, ON

  Full Time

  

  Interac Corp.: Interac se fait le champion d’une culture organisationnelle et d’une citoyenneté d’entreprise fondées sur les principes de responsabilité, de…

  5+ YOECandidates need 5+ years of application security or software security experience, preferably in FinTech, SaaS or cloud-native settings. They need hands-on skill with security testing tools, DevSecOps practices, at least one programming language, and cloud security knowledge.

  SAST, SCA, DAST, CI/CD pipelines, container security platforms

• 1mo

  Staff Product Security Engineer

  Ontario

  RemoteFull Time

  

  DataRobot, Inc.

  8+ YOECandidates need 8+ years in information security, mostly in product security or AppSec, plus deep knowledge of FedRAMP, NIST 800-53 and the DoD Cloud SRG. They must write Python or Go, understand Linux containers well, and have hands-on experience with Semgrep, Trivy and Burp Suite. A bachelor's or master's degree in a related field, or equivalent experience, is required.

  Semgrep, Trivy, Burp Suite, Kubernetes, Python, Go

• 1mo

  Staff Security Engineer

  Remote in Canada

  RemoteFull Time

  

  Redpanda Data

  7+ YOECandidates need 7+ years in application or product security and the ability to review systems code, ideally C++ or Rust. They should have experience leading threat modeling, running AppSec tools and securing the software supply chain.

  SAST tools, SCA tools, secret scanning tools, DAST tools, libFuzzer, AFL++

• 1mo

  Senior DevOps Engineer - Cloud Operations

  Calgary, AB

  

  Black Duck Software, Inc.

  Candidates need hands-on Google Cloud experience and deep Kubernetes skills. They also need cloud networking and security knowledge, CI/CD and scripting skills, and a bachelor's degree or equivalent experience.

  Google Cloud Platform, Kubernetes, Terraform, Helm, ArgoCD, GitHub Actions

  1mo

  Lead Product Security

  Remote in Canada

  Remote

  

  Black Duck Software, Inc.

  8+ YOECandidates need 8+ years in product or application security, hands-on design review and threat modeling skills, and experience building a security champions or enablement program. A bachelor's degree or equivalent practical experience is required.

  Black Duck SCA, Coverity, GitGuardian, Jira

20 companies