Senior Software Security Engineer

Job Title: Senior Software Engineer - Security

Location: Fully Remote Role- Greater Toronto Area

Duration: 06+ Months Contract with Possible Extension

Pay Range: $90 CAD -$100 CAD Per Hour on T4

Job Duties:

Client’s Security Engineering team is seeking a highly motivated Senior Software Engineer on a contract basis to contribute to strategic initiatives in supply chain security and cloud-native security. This role requires technical expertise in the implementation and continuous improvement of security controls across infrastructure supply chain, containerized environments, and security automation (including AI/ML/LLM solutions). You will be a key contributor in implementing security best practices for our containerized environments and maturing our overall security posture.

Key Responsibilities:

• Design, implement the process for building and maintaining hardened container base images for development and production environments, focusing on minimizing attack surface.

• Provide technical support and engineering solutions for securing Kubernetes (K8s) and containerized workloads, including runtime security, network policies, and admission controllers.

• Secure end-to-end infrastructure supply chain including CI/CD tools implementation, IaC templates, base images, Helm charts and third-party dependencies.

• Build and contribute to our security automation initiatives for custom tooling.

• Triaging vulnerabilities identified from application security reviews, discoveries in internal Pentesting, SAST, DAST and SCA sources.

• Drive the prioritization and remediation plan for vulnerabilities in partnership with Auth0 engineering teams, including development and commit of patches to remediate issues. .

Required Skills:

Our Ideal Candidate Will Have:

• Deep, proven experience with container security, including designing and deploying hardened container images and securing Kubernetes clusters.

• Experience with Infrastructure as Code (IaC) tools, especially Terraform, for provisioning security controls.

• Strong practical experience in building and operating security automation, with development expertise in languages like Go and/or Python

• Expertise in using GitHub, and CI/CD systems (GitHub Actions, Jenkins) from an architectural and engineering perspective.

• Expert-level proficiency in Software Composition Analysis (SCA) and hands-on experience in the practical remediation of third-party and open-source dependency vulnerabilities at scale.

• Direct experience or strong conceptual understanding of applying AI/ML, Large Language Models (LLMs), or MCP techniques to security challenges (e.g., automated vulnerability fixing, intelligent alert grouping).

• Expert familiarity with cloud platforms (AWS, Azure) and their security services, with a focus on container orchestration.

Nice to Have:

• Experience with Artifactory/JFrog

• Advanced knowledge of Application security (OWASP Top 10)

• Experience with supply chain security frameworks (e.g., SLSA).