Security & AI DevSecOps Expert (Hybrid)

Job summary

Automate security throughout the software development lifecycle by integrating security controls into CI/CD pipelines. Leverage frontier AI technologies to accelerate the discovery, analysis, and remediation of vulnerabilities.

Job details

12 month contract hybrid (Toronto location) Application Security & AI DevSecOps Expert About the Role We are looking for a highly hands-on Application Security Expert who combines the skills of a Security Architect and a DevSecOps Specialist. This individual will play a key role in automating security throughout the entire software development lifecycle while leveraging the capabilities offered by the most advanced artificial intelligence technologies. Specifically, we are referring to next-generation AI technologies ("frontier AI") capable of automating complex tasks, including vulnerability discovery, analysis, and remediation. The objective is to strengthen application security against increasingly fast, sophisticated, and automated threats. Responsibilities Identify and analyze vulnerabilities in source code, applications, and software dependencies. Perform security assessments using SAST, DAST, and SCA tools. Collaborate with development, architecture, and infrastructure teams to promote DevSecOps best practices. Utilize AI tools and agents to accelerate vulnerability detection, analysis, and remediation. Contribute to the evolution of cybersecurity practices related to AI adoption and the protection of modern applications. Develop automation scripts and tools using Python (preferred) or Java. Design and maintain secure infrastructures using Terraform and Infrastructure as Code (IaC) principles. Build automated mechanisms to detect, remediate, and prevent vulnerabilities. Integrate security fixes directly into development teams' CI/CD pipelines. Automate security controls and scans within software delivery pipelines. Implement, configure, and integrate application security tools. Required Qualifications Significant experience in Application Security within a DevSecOps environment. Strong experience with vulnerability analysis tools: SAST (Static Application Security Testing) DAST (Dynamic Application Security Testing) SCA (Software Composition Analysis) Excellent development and scripting skills, ideally in Python or Java. Experience with Terraform and Infrastructure as Code (IaC) approaches. Experience integrating security controls into CI/CD pipelines. Strong knowledge of DevSecOps practices and security automation. Preferred Qualifications Understanding of security risks related to Artificial Intelligence. Experience using AI for vulnerability detection or analysis. Knowledge of AI-assisted attacks and emerging cybersecurity trends. Experience with AWS and/or Azure cloud platforms. Knowledge of automated remediation approaches and secure software development practices. Desired Profile We are looking for someone capable of automating security from end to end. A professional who not only identifies vulnerabilities but is also able to develop fixes, integrate them into development pipelines, and use AI as a force multiplier to detect issues earlier and remediate them faster. This person must be equally comfortable working in code and infrastructure, while bringing a modern perspective on cybersecurity and the evolving threat landscape associated with artificial intelligence. ACCESSIBILITY We’re committed to fostering an inclusive, equitable, and accessible workplace where every team member feels valued, respected, and supported, and has the opportunity to reach their full potential. We welcome and encourage applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. For a confidential inquiry, simply email your recruiter directly or accessibility@fxinnovation.com to make arrangements. If you have questions regarding accessible employment at Ateko please email our Human Resources team at accessibility@fxinnovation.com Ateko Derek Weber - Senior Recruiter derek.weber@ateko.com

What you’ll do

Automate security throughout the software development lifecycle by integrating security controls into CI/CD pipelines. Leverage frontier AI technologies to accelerate the discovery, analysis, and remediation of vulnerabilities.

Requirements

Requires significant experience in Application Security and DevSecOps, specifically with SAST, DAST, and SCA tools. Proficiency in Python or Java and experience with Terraform and cloud platforms like AWS or Azure are essential.

Listed skills

• Microsoft Azure · Preferred
• Amazon Web Services · Preferred
• Java · Preferred
• Terraform · Preferred
• Python · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Application Security
• DevSecOps
• SAST
• DAST
• SCA
• Python
• Java
• Terraform
• Infrastructure as Code
• CI/CD Pipelines
• Vulnerability Analysis
• AI Security
• AWS
• Azure
• Security Automation
• Security Architecture

Job areas

• Security & Safety
• Software
• Technology
• Consulting
• Engineering