{"id":3363423,"url":"https://alion.io/job/s-i-systems-senior-devsecops-and-application-security-sme","title":"Senior DevSecOps and Application Security SME","company":{"id":3865830,"name":"S.i. Systems","domain":"sisystems.com","url":"https://alion.io/company/sisystems-2","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Edmonton, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":67000,"max_usd":126000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":53},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"CodeQL","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"OWASP","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Bicep","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-27T07:58:52Z","employer_posted_date":null,"last_verified_at":"2026-10-27T07:58:52Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Our client is looking for Senior DevSecOps and Application Security SME to implement and optimize application security capabilities across GitHub Enterprise, GitHub Advanced Security, GitHub Actions, and Azure DevOps, including SAST, SCA, secret scanning, CodeQL, dependency review, and Infrastructure as Code scanning. - 7405\n\n1 year contract, likley will extend, Open to remote, preferrrabley some local\n**Please note that for the successful candidate will be required to provide and use their own laptop for the duration of the contract.\n\nSenior DevSecOps and Application Security SME supporting the AppSec Testing Maturity work program. The resource will implement and optimize application security capabilities across GitHub Enterprise, GitHub Advanced Security, GitHub Actions, and Azure DevOps, including SAST, SCA, secret scanning, CodeQL, dependency review, and Infrastructure as Code scanning. The role will support secure CI/CD integration, application onboarding, vulnerability management, security standards and reporting, software supply chain risk management, and secure SDLC practices, while collaborating with technical teams and providing knowledge transfer to internal staff. The anticipated assignment duration is 8 to 10 months, with the possibility of extension.\n\nMust Have\nUniversity or College degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related field; an equivalent combination of education and relevant experience may be considered.\nA minimum of 7 years of relevant experience in software engineering, DevSecOps, application security, cloud security, or closely related work, including a minimum of 3 years of hands-on DevSecOps or application security engineering experience.\nDemonstrated hands-on experience implementing GitHub Enterprise and GitHub Advanced Security in a production or large enterprise environment.\nStrong experience with CodeQL, SAST, SCA, secret scanning, dependency review, and vulnerability remediation workflows.\nHands-on experience integrating security controls with GitHub Actions and Azure DevOps pipelines, including security checks in pull request, build, and release workflows.\nExperience with Infrastructure as Code and related security scanning.\nA software development or automation background with the ability to review and troubleshoot code, scripts, pipeline definitions, and YAML-based workflows.\nWorking knowledge of secure SDLC, OWASP application security practices, software supply chain security, threat modeling, vulnerability management, and risk-based remediation.\nExperience designing repeatable application security standards, governance, operating procedures, metrics, and onboarding practices.\nProven ability to collaborate with application teams, cybersecurity teams, platform owners, vendors, contractors, and senior stakeholders, and communicate technical risks and decisions to technical and non-technical audiences.\nDemonstrated ability to coach internal resources and complete effective knowledge transfer.\n\nNice to Have\nExperience with Terraform, Bicep, ARM templates, or similar Infrastructure as Code technologies.\nPreferred certifications include GIAC Cloud Security Automation (GCSA), GIAC Cloud Security Essentials (GCLD), GIAC Public Cloud Security (GPCS), GitHub Advanced Security (GH-500), Microsoft Certified: DevOps Engineer Expert (AZ-400), and Microsoft Certified: Azure Security Engineer Associate (AZ-500).\nDisclaimer:\nAI may be used in evaluating candidates.\nThis posting is for an existing vacancy.","description_format":"text","description_chars":3545,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-27T22:09:30Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.596,"p_room":1,"age_days":4,"expected_fill_days":24,"reasons":["seen:4","agency","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/s-i-systems-senior-devsecops-and-application-security-sme","json_url":"https://alion.io/job/s-i-systems-senior-devsecops-and-application-security-sme.json","meta":{"generated_at":"2026-11-01T21:52:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33363,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3865830},"rest":"https://alion.io/mcp/rest/get_company?id=3865830"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fs-i-systems-senior-devsecops-and-application-security-sme"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fs-i-systems-senior-devsecops-and-application-security-sme"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fs-i-systems-senior-devsecops-and-application-security-sme"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/s-i-systems-senior-devsecops-and-application-security-sme\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fs-i-systems-senior-devsecops-and-application-security-sme"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3363423}},{"tool":"search_jobs","arguments":{"company":"sisystems.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3363423},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}