Publié le mois dernier
Senior DevSecOps & AI Security Engineer
@ Querentia Inc.
Toronto, Ontario
En bref
Querentia Inc. is hiring a Senior DevSecOps & AI Security Engineer on a contract basis to secure applications, cloud-native platforms, CI/CD pipelines and AI/LLM solutions. The work covers penetration testing, secure code review, vulnerability management, Azure and container security, and Python security automation.
Responsabilités :
- Penetration testing of web, API, mobile, cloud and AI applications
- Secure code reviews and validation of SAST, DAST, SCA and container findings
- Prompt injection and jailbreak testing of AI/LLM applications
- Security controls in CI/CD pipelines and Python-based security automation
- Vulnerability prioritization and remediation with engineering teams
Résumé des exigences :
- 6+ years in application security, DevSecOps, offensive security or security engineering
- Bachelor's or Master's in Computer Science, Information Security, Cybersecurity or related field
- Experience securing cloud-native and AI-enabled applications
- Strong Python scripting and security automation skills
- 2-3 certifications required from CISSP, CSSLP, AZ-500, Certified DevSecOps Professional, or Azure/AWS cloud security
Outils et compétences
Source et dates
Type de source non vérifié · jsonld
- Date publiée par l’employeur
- 2026-09-23
- Première détection par notre source
- 2026-10-26
- Mise à jour du dossier source
- 2026-11-05
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Senior |
| Domaine | Développement logiciel |
| Expérience | 6 an(s) et plus |
| Milieu de travail | Bureau |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Permis et certifications | CISSP, CSSLP, AZ-500, Certified DevSecOps Professional, Azure/AWS cloud security certification |
| Formation | Baccalauréat (exigé), Maîtrise (préféré) |
| Domaines d’études | Computer Science, Information Security, Cybersecurity |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Querentia Inc.
| Champ | Valeur |
|---|---|
| Offres sur Jobsy | 331 |
Senior DevSecOps & AI Security Engineer
Role Overview
We are seeking an experienced Senior DevSecOps & AI Security Engineer to strengthen security across applications, cloud-native platforms, DevSecOps pipelines, and AI/LLM-based solutions . The role focuses on application security, offensive security testing, vulnerability management, secure code reviews, cloud security, and emerging AI security practices.
Primary Skills
•
Application Security - SAST, DAST, Secure Code Review
•
Penetration Testing - Web, API, Mobile
•
AI/LLM Security - Prompt Injection, Jailbreak & Model Security
•
DevSecOps & CI/CD Security
•
Vulnerability Management & Remediation
•
Security Automation using Python
Secondary Skills
•
Azure Cloud Security
•
Container & Kubernetes Security
•
SCA & Open-Source Security
•
GitHub Security Controls
•
Threat Modeling & Risk Assessment
•
Security Governance & Developer Enablement
Key Responsibilities
Security Assessment & Testing
•
Perform penetration testing across web, API, mobile, cloud-native, and AI-powered applications .
•
Conduct secure code reviews and identify application security weaknesses.
•
Validate findings from SAST, DAST, SCA, and container security tools .
•
Perform vulnerability analysis, root-cause investigation, and remediation validation.
AI Security
•
Assess AI/LLM applications for security vulnerabilities and misuse scenarios.
•
Conduct prompt injection, manipulation, and jailbreak testing.
•
Evaluate AI deployment architectures and recommend appropriate security controls.
•
Support secure AI adoption across enterprise platforms.
DevSecOps & Automation
•
Integrate security controls into CI/CD pipelines and deployment workflows.
•
Implement shift-left security practices.
•
Automate security validation and reporting using Python .
•
Optimize vulnerability assessment and remediation workflows.
•
Enhance security monitoring and policy enforcement across development environments.
Cloud & Container Security
•
Perform Azure cloud security assessments .
•
Review Kubernetes and containerized workloads for security risks.
•
Analyze container images and deployment configurations.
•
Recommend cloud-native security practices and remediation actions.
Vulnerability Management & Governance
•
Review and validate vulnerabilities identified by enterprise security tools.
•
Prioritize findings based on exploitability, business risk, and operational impact .
•
Drive remediation with engineering teams and verify effectiveness.
•
Support security governance, compliance, and audit activities.
Stakeholder Engagement
•
Collaborate with development, DevOps, architecture, and product teams .
•
Provide guidance on secure coding and vulnerability remediation.
•
Mentor engineering teams on security-first development.
•
Present security findings and recommendations to technical and business stakeholders.
Required Qualifications
•
Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or related field .
•
6+ years of experience in Application Security, DevSecOps, Offensive Security, or Security Engineering.
•
Strong understanding of SDLC, SSDLC, DevSecOps, and MLOps .
•
Hands-on experience with penetration testing, secure code reviews, and vulnerability management.
•
Experience securing cloud-native and AI-enabled applications .
•
Strong Python scripting and security automation experience.
Certifications
Any 2-3 certifications mandatory:
•
CISSP
•
CSSLP
•
Microsoft Azure Security Engineer ( AZ-500 )
•
Certified DevSecOps Professional
•
Cloud Security Certifications - Azure/AWS
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.