DevSecOps Lead (Azure)

TL;DR

DevSecOps Lead (Azure/AI): Embedding security into products, pipelines, and development workflows with an accent on CI/CD automation, C#/.NET applications, and Azure infrastructure. Focus on building security guardrails for AI-assisted development and scaling automated security practices across SaaS products.

Location: Remote (Canada)

Salary: $150k–180k CAD

Company

Montreal-based tech company specializing in agentic HR platforms and Microsoft 365 migration and governance solutions.

What you will do

• Embed security into CI/CD pipelines by delivering scalable automation and integrated checks (SAST, DAST, SCA, secret scanning).
• Design and implement automated, policy-driven security review workflows to enable secure-by-default development.
• Establish robust security guardrails within AI-assisted development and agent workflows to reduce risk.
• Lead threat modeling and security assessments for new features and architectural changes.
• Partner with Infrastructure SecOps to harden Azure environments and deployment practices.
• Scale the bug bounty program and improve external security feedback loops.

Requirements

• 8+ years of experience in application security, DevSecOps, or security-focused software development.
• Deep understanding of web application security principles, including OWASP Top 10 and CWE Top 25.
• Hands-on experience performing secure code reviews in C#.
• Expertise in building security automation using GitHub Actions and managing Azure cloud services.
• Proficiency in Python or Bash for automation and tooling.
• Must be based in Canada.

Culture & Benefits

• Healthy and inclusive work environment that adapts to individual needs.
• Culture of experimentation, rapid learning, and proactive ownership.
• Collaborative atmosphere focusing on building scalable, secure-by-default solutions.
• Support for creative expression and professional evolution.

Hiring process

• Phone Screen.
• Virtual Interview via Microsoft Teams.
• Work Sample.
• Job Offer.