{"id":3908401,"url":"https://alion.io/job/querentia-security-engineer","title":"Security Engineer","company":{"id":4460938,"name":"Querentia","domain":"querentia.com","url":"https://alion.io/company/querentia","size_band":"1-10","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"C","score":57,"open_postings":218,"ghost_share":0.716,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Checkmarx","optional":true},{"name":"Configuration Management","optional":true},{"name":"Kubernetes","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Snyk","optional":true},{"name":"SonarQube","optional":true}],"status":"live","first_seen_at":"2026-03-26T00:00:00Z","employer_posted_date":"2026-03-26","last_verified_at":"2026-11-07T04:57:08Z","board_verified":true,"closed_at":null,"days_open":226,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":226},"description":"Job Title: Security Engineer (DevSecOps / Cloud)Location: Remote\nDuration: 6-Month Contract (Full-Time - 37.5 hours/week, Exclusive)\nClearance: Secret or Top-Secret (Mandatory)\nRole Overview\nWe are seeking a skilled Security Engineer to support a Government of Canada (GOC) client in delivering secure cloud-based applications. This role focuses on embedding security into the software development lifecycle, with a strong emphasis on CI/CD security, automated controls, and compliance with federal security standards.\nThe ideal candidate will have hands-on experience with Security Assessment & Authorization (SA&A) processes within the GOC environment and a strong background in DevSecOps practices.\nKey Responsibilities\nDesign and implement secure CI/CD pipelines with integrated security controls\nDeploy and manage automated security scanning tools (SAST, DAST, SCA, container security, etc.)\nLead and support Security Assessment & Authorization (SA&A) activities for cloud-based applications\nEnsure compliance with Government of Canada security frameworks, policies, and standards\nIdentify, assess, and remediate application and infrastructure vulnerabilities\nApply modern security engineering practices across the SDLC\nCollaborate with development and DevOps teams to embed DevSecOps best practices\nSupport threat modeling, risk assessments, and security reviews for new and existing systems\nMandatory Requirements\nBachelor ’ s degree or College Diploma in a relevant discipline\nMinimum 5+ years of experience in a software development / engineering environment\nStrong hands-on experience with CI/CD pipelines and DevSecOps practices\nProven experience completing Security Assessment & Authorization (SA&A) for at least two (2) cloud-based applications within the last 5 years ( GOC experience required )\nMinimum 2+ years of recent experience implementing automated security scanning and controls within CI/CD pipelines\nExperience applying modern application security principles to applications released within the past 3 years\nActive Secret or Top-Secret Clearance (Mandatory)\nAdditional Requirements\nPrior experience working within Government of Canada (GOC) environments\nStrong knowledge of cloud security, risk management, and compliance frameworks\nAbility to commit to a full-time (37.5 hours/week), exclusive contract\nStrong communication and stakeholder collaboration skills\nNice to Have\nCertifications such as CISSP, CISM, CEH, AWS/Azure Security\nExperience with Infrastructure as Code (IaC) and secure configuration management\nFamiliarity with containerization and Kubernetes security\n• Experience with security tools like SonarQube, Snyk, Checkmarx, Prisma Cloud , etc.","description_format":"text","description_chars":2684,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-11-07T04:56:30Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.222,"p_room":0.28,"age_days":226,"expected_fill_days":31,"reasons":["conf:0","agency","stale_co","urgency","ghost","win:tail","crowd:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/querentia-security-engineer","json_url":"https://alion.io/job/querentia-security-engineer.json","meta":{"generated_at":"2026-11-07T07:43:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3190,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4460938},"rest":"https://alion.io/mcp/rest/get_company?id=4460938"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquerentia-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquerentia-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquerentia-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/querentia-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquerentia-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3908401}},{"tool":"search_jobs","arguments":{"company":"querentia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3908401},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}