Configure GitHub Advanced Security and CodeQL as a Senior DevSecOps and Application Security SME supporting an AppSec Testing Maturity program.
This 10 to 12 month engagement requires senior expertise across GitHub Enterprise, SAST, SCA, secret scanning, and IaC scanning. You will integrate controls into GitHub Actions, Azure DevOps pipelines, pull requests, builds, and release gates. The work also includes standards, reporting, vulnerability workflows, and application onboarding.
Key Responsibilities
Configure and optimize GitHub Enterprise and GHAS capabilitiesImplement security scanning across repositories and technology stacksCreate reusable pipeline templates and onboarding patternsDefine vulnerability triage, remediation, exception,
and closure processesCoach BC Hydro staff through structured knowledge transferRequirements:
Seven years of relevant software, DevSecOps, or security experienceThree years of hands-on DevSecOps or application security engineeringProduction experience implementing GitHub Enterprise and GHASHands-on GitHub Actions and Azure DevOps integration experienceAbility to troubleshoot code, scripts, pipelines, and YAML workflowsApply GitHub security engineering, automated testing, and developer-focused guidance across enterprise application security delivery.
#J-18808-Ljbffr