Security Engineer

Location: Remote

Duration: 6-Month Contract (Full-Time - 37.5 hours/week, Exclusive)

Clearance: Secret or Top-Secret (Mandatory)

Role Overview

We are seeking a skilled Security Engineer to support a Government of Canada (GOC) client in delivering secure cloud-based applications. This role focuses on embedding security into the software development lifecycle, with a strong emphasis on CI/CD security, automated controls, and compliance with federal security standards.

The ideal candidate will have hands-on experience with Security Assessment & Authorization (SA&A) processes within the GOC environment and a strong background in DevSecOps practices.

Key Responsibilities

• Design and implement secure CI/CD pipelines with integrated security controls
• Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security, etc.)
• Lead and support Security Assessment & Authorization (SA&A) activities for cloud-based applications
• Ensure compliance with Government of Canada security frameworks, policies, and standards
• Identify, assess, and remediate application and infrastructure vulnerabilities
• Apply modern security engineering practices across the SDLC
• Collaborate with development and DevOps teams to embed DevSecOps best practices
• Support threat modeling, risk assessments, and security reviews for new and existing systems

Mandatory Requirements

• Bachelor ’ s degree or College Diploma in a relevant discipline
• Minimum 5+ years of experience in a software development / engineering environment
• Strong hands-on experience with CI/CD pipelines and DevSecOps practices
• Proven experience completing Security Assessment & Authorization (SA&A) for at least two (2) cloud-based applications within the last 5 years ( GOC experience required )
• Minimum 2+ years of recent experience implementing automated security scanning and controls within CI/CD pipelines
• Experience applying modern application security principles to applications released within the past 3 years
• Active Secret or Top-Secret Clearance (Mandatory)

Additional Requirements

• Prior experience working within Government of Canada (GOC) environments
• Strong knowledge of cloud security, risk management, and compliance frameworks
• Ability to commit to a full-time (37.5 hours/week), exclusive contract
• Strong communication and stakeholder collaboration skills

Nice to Have

• Certifications such as CISSP, CISM, CEH, AWS/Azure Security
• Experience with Infrastructure as Code (IaC) and secure configuration management
• Familiarity with containerization and Kubernetes security

• Experience with security tools like SonarQube, Snyk, Checkmarx, Prisma Cloud , etc.