Configure GitHub Advanced Security and CodeQL as a Senior DevSecOps and Application Security SME supporting an AppSec Testing Maturity program.

This 10 to 12 month engagement requires senior expertise across GitHub Enterprise, SAST, SCA, secret scanning, and IaC scanning. You will integrate controls into GitHub Actions, Azure DevOps pipelines, pull requests, builds, and release gates. The work also includes standards, reporting, vulnerability workflows, and application onboarding.

Key Responsibilities:

- Configure and optimize GitHub Enterprise and GHAS capabilities
- Implement security scanning across repositories and technology stacks
- Create reusable pipeline templates and onboarding patterns
- Define vulnerability triage, remediation, exception, and closure processes




- Coach BC Hydro staff through structured knowledge transfer

Requirements:

- Seven years of relevant software, DevSecOps, or security experience
- Three years of hands-on DevSecOps or application security engineering
- Production experience implementing GitHub Enterprise and GHAS
- Hands-on GitHub Actions and Azure DevOps integration experience
- Ability to troubleshoot code, scripts, pipelines, and YAML workflows

Apply GitHub security engineering, automated testing, and developer-focused guidance across enterprise application security delivery.

📌 Senior GitHub Advanced Security Engineer (Regina)
🏢 ThirdEye CyberSecurity
📍 Regina