Configure GitHub Advanced Security and CodeQL as a Senior DevSecOps and Application Security SME supporting an AppSec Testing Maturity program.

This 10 to 12 month engagement requires senior expertise across GitHub Enterprise, SAST, SCA, secret scanning, and IaC scanning. You will integrate controls into GitHub Actions, Azure DevOps pipelines, pull requests, builds, and release gates. The work also includes standards, reporting, vulnerability workflows, and application onboarding.

Key Responsibilities

Configure and optimize GitHub Enterprise and GHAS capabilities

Implement security scanning across repositories and technology stacks

Create reusable pipeline templates and onboarding patterns

Define vulnerability triage, remediation, exception, and closure processes





Coach BC Hydro staff through structured knowledge transfer

Requirements

Seven years of relevant software, DevSecOps, or security experience

Three years of hands-on DevSecOps or application security engineering

Production experience implementing GitHub Enterprise and GHAS

Hands-on GitHub Actions and Azure DevOps integration experience

Ability to troubleshoot code, scripts, pipelines, and YAML workflows

Apply GitHub security engineering, automated testing, and developer-focused guidance across enterprise application security delivery.

📌 Senior GitHub Advanced Security Engineer (Winnipeg)
🏢 ThirdEye CyberSecurity
📍 Winnipeg