This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Software Engineer - Security based in Canada.

As a Senior Software Engineer specializing in Security, you will play a key role in strengthening cloud-native security and protecting the software infrastructure supply chain. You will design and implement security solutions across containerized environments, Kubernetes platforms, CI/CD pipelines, and cloud infrastructure. Working at the intersection of software engineering and cybersecurity, you will help develop hardened container images, automate security controls, and address vulnerabilities at scale. You will collaborate closely with engineering and security teams to improve infrastructure resilience and establish secure development practices. You will also contribute to innovative security automation initiatives involving artificial intelligence, machine learning, and large language models. This is an chance to take ownership of high-impact technical initiatives while helping mature security practices in a complex, cloud-native environment.

Accountabilities

- Design, develop, and maintain processes for building and managing hardened container base images for development and production environments, minimizing attack surfaces and strengthening overall security.
- Provide hands-on engineering support for securing Kubernetes clusters and containerized workloads, including runtime security, network policies, and admission controllers.
- Strengthen the end-to-end software and infrastructure supply chain by securing CI/CD tools, Infrastructure as Code (IaC) templates, container base images, Helm charts, and third-party dependencies.
- Develop, implement,



and continuously improve security automation solutions, including custom tools and scripts that streamline security operations and vulnerability remediation.
- Identify, assess, and triage vulnerabilities discovered through application security reviews, internal penetration testing, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
- Lead vulnerability prioritization and remediation initiatives in collaboration with engineering teams, ensuring risks are addressed effectively and within appropriate timelines.
- Develop, review, and commit code patches to remediate security vulnerabilities, particularly those affecting third-party and open-source software dependencies.
- Contribute to AI-driven security engineering initiatives, exploring the use of machine learning, large language models (LLMs), and Model Context Protocol (MCP) techniques for automated vulnerability remediation and intelligent security alert grouping.
- Promote security engineering best practices across development and infrastructure teams, helping improve the overall security posture of cloud-native environments.

Requirements

- Bachelor's degree or post-secondary qualification in Computer Science, Information Security, Software Engineering, or a related discipline, or equivalent practical experience.




- Extensive hands-on experience in container security, including designing, implementing, and maintaining hardened container images and securing Kubernetes clusters.
- Strong practical knowledge of Kubernetes and containerized environments, including workload protection, runtime security, network policies, and admission control mechanisms.
- Experience with Infrastructure as Code (IaC) tools, particularly Terraform, for provisioning infrastructure and implementing security controls.
- Proven experience developing and operating security automation solutions, with strong programming skills in Go and/or Python.
- Advanced expertise with GitHub and CI/CD platforms such as GitHub Actions and Jenkins, including their architecture, configuration, and security engineering practices.
- Expert-level proficiency in Software Composition Analysis (SCA), with demonstrated experience identifying and remediating third-party and open-source dependency vulnerabilities at scale.
- Direct experience or strong conceptual understanding of applying AI, machine learning, large language models (LLMs), or MCP techniques to cybersecurity challenges, including automated vulnerability fixing and intelligent alert management.
- Strong familiarity with cloud platforms, particularly AWS and Azure, including their security services and container orchestration capabilities.
- Excellent problem-solving and analytical skills, with the ability to investigate complex security issues and develop practical engineering solutions.
- Strong collaboration and communication skills, with the ability to work effectively with security specialists, software engineers, and cross-functional stakeholders.
- Ability

📌 Senior Software Engineer (Toronto)
🏢 Jobgether
📍 Toronto