DevSecops Consulant

Canada
Remote
Posted Oct 17, 2026
1 position

Opens LinkedIn

Employment type: Contract
Experience level: Senior · 5+ years
Posting language: English
Working hours: 38 hours per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Define and evolve the DevSecOps product strategy and roadmap, prioritizing capabilities and investments while improving security tooling, asset visibility, vulnerability prioritization, and remediation automation. Align DevSecOps capabilities with platforms and dependent initiatives, and collaborate with product owners, architects, security experts, and delivery teams to deliver measurable value.

Job details

DevSecops Consulant Duration: 12 months, renewable, temp-to-perm possible Location: Remote Languages: French must have. English Must have Hours: 37.5 Key Responsibilities: Define and evolve the DevSecOps product vision, strategy, and roadmap in line with the program's objectives. Prioritize pillar capabilities and investments based on value, risk, dependencies, and impact on development teams. Drive the evolution of capabilities including SAST, SCA, IaC, secrets, containers, and DAST/fuzzing, as well as their integration with GitHub, Azure DevOps, TFVC, and delivery pipelines. Advance visibility and traceability of application assets, including inventory, repositories, applications, their owners, and SBoM. Evolve vulnerability consolidation and contextualization, risk-based prioritization, and mechanisms for teams to focus efforts on the most important risks. Inform capabilities to accelerate remediation and automation, including automated remediation PRs, exception management, and dependency evergreening. Evolve SLAs, metrics, gating mechanisms, and control effectiveness metrics to make visible the exposure, deviations, and adoption of DevSecOps practices. Align with dependent initiatives and platforms, including CMDB/ServiceNow, GitHub, Azure DevOps, and SDLC security capabilities. The CMDB is explicitly intended to contextualize assets, managers, and exposure. Work with Product Owners, architects, safety experts, and delivery teams to transform product directions into capabilities and value increments, while maintaining a cross-functional vision.

What you’ll do

Requirements

French and English are both required. The role calls for mid-to-senior DevSecOps product expertise, including security capabilities and integrations across development tools and delivery pipelines; no education requirements are stated.