We are looking for a highly technical, hands-on Principal DevSecOps Developer to join Upgrade's Security team. In this role, you'll focus on building and improving security automation, strengthening our SaaS setting, and developing scalable solutions that enhance security operations across the organization.You'll leverage your programming and scripting skills, hands‑on operations experience, and understanding of APIs, IAM permissions, and security best practices to solve complex technical challenges. You'll analyze code, troubleshoot technical issues, and apply risk‑based thinking to identify vulnerabilities and implement effective security controls.This is a highly autonomous, engineering‑focused role where you'll have the opportunity to build security automations from the ground up, leverage AI to improve workflows, and solve challenging security problems.

You'll work closely with Security, Engineering, DevOps, and IT teams to streamline processes.AWS (IAM, Security Services), Terraform, Python, Bash, REST APIs, AI/LLM Tools (Claude, AI Agents, MCP), Tines/SOAR, Sumo Logic, CrowdStrike, Okta, Akamai, Sublime Security, SIGMA/YARA, Kubernetes, Docker, CI/CD Pipelines, FleetDM/osquery, GCP, Google Workspace, Microsoft Entra ID, Microsoft 365.Implement AWS security controls, including IAM policies and least‑privilege access.Identify, investigate, and resolve security risks across cloud infrastructure and internal systems.Use AI tools, agents, and MCP integrations to improve security workflows.Troubleshoot issues across infrastructure, networking, and security tools.Develop and improve security monitoring, detection,



and response capabilities.Partner with Engineering, DevOps, and IT teams to implement security improvements.Strong programming, scripting, and automation skills across one or more languages.Hands‑on AWS security experience, including IAM permissions and least‑privilege principles.Strong Terraform skills, including independently writing and maintaining modules.Solid understanding of APIs, authentication, and secure integrations.Knowledge of security fundamentals, risk analysis, and cloud security best practices.Strong troubleshooting skills across infrastructure, networking, and technical operations.Experience using AI development tools while independently validating generated code.Familiarity with AI agents, automation frameworks, or MCP integrations.Ability to work independently and solve complex technical problems.Experience with Sumo Logic or similar monitoring tools.Experience writing SIGMA or YARA detection rules.Understanding of event‑driven architecture and enterprise IT systems.Knowledge of OWASP principles, including LLM/AI security.Familiarity with GCP, Google Workspace, or Microsoft Entra ID.Experience with CI/CD pipeline security or software supply chain security.You use AI effectively without relying on it for every task, and are able to leverage your own knowledge and experience to challenge its assertions.Competitive salary ($150k-$200k+) and stock option planPaid coverage of medical, dental and vision insuranceFlexible PTOOpportunities for professional growth and developmentPaid parental leaveHealth & wellness initiatives #

📌 Principal Devsecops Developer (Winnipeg)
🏢 Uplift
📍 Winnipeg