Configure GitHub Advanced Security and CodeQL as a Senior DevSecOps and Application Security SME supporting an AppSec Testing Maturity program.
This 10 to 12 month engagement requires senior expertise across GitHub Enterprise, SAST, SCA, secret scanning, and IaC scanning. You will integrate controls into GitHub Actions, Azure DevOps pipelines, pull requests, builds, and release gates. The work also includes standards, reporting, vulnerability workflows, and application onboarding.
Key Responsibilities: Configure and optimize GitHub Enterprise and GHAS capabilities
Implement security scanning across repositories and technology stacks
Create reusable pipeline templates and onboarding patterns
Define vulnerability triage, remediation, exception, and closure processes




Coach BC Hydro staff through structured knowledge transfer
Requirements: Seven years of relevant software, DevSecOps, or security experience
Three years of hands-on DevSecOps or application security engineering
Production experience implementing GitHub Enterprise and GHAS
Hands-on GitHub Actions and Azure DevOps integration experience
Ability to troubleshoot code, scripts, pipelines, and YAML workflows
Apply GitHub security engineering, automated testing, and developer-focused guidance across enterprise application security delivery.

#J-18808-Ljbffr

📌 Senior GitHub Advanced Security Engineer (Saskatchewan)
🏢 ThirdEye CyberSecurity
📍 Saskatchewan