Senior Consultant – DevSecOps / Application Security responsible for implementing and supporting Secure SDLC (SSDLC) and DevSecOps practices across the software development lifecycle, ensuring security is embedded into design, development, testing, and deployment.
Responsibilities
Implement Secure SDLC (SSDLC) practices across application development and CI/CD pipelines
Perform application security assessments including SAST, DAST, SCA, and basic threat modeling
Integrate and automate security tools within CI/CD pipelines (e.g., secret scanning, IaC scanning, container security)
Support development teams in secure coding practices, vulnerability remediation, and code reviews
Work on DevSecOps pipeline implementation and optimization using enterprise and open-source tools
Serve as the technical authority for our multi-cloud security strategy, defining the architectural 'North Star' for our cloud-native platforms to ensure they are secure by design.
Compensation
$152,300.00 - $246,400.00/yr
Responsibilities
Define and maintain the authoritative security architecture patterns for services across multi-cloud environments
Lead the design of secure, scalable, and resilient systems by championing 'Security by Design' principles
Drive the architectural strategy and implementation of Zero Trust principles across development environments and production SaaS platforms
Own the organization's threat modeling methodology
Translate architectural risks into actionable items for the Cybersecurity Risk Register
The Senior Threat Modelling Advisor will model threats to facilitate understanding of cybersecurity issues impacting the group, interacting with Cyber Defence, Internal Threats, and development teams.
Compensation
Competitive salary and annual bonus
Responsibilities
Contribute as an expert to enrich the action plans of the defence teams.
Analyze, map and explain REALISTIC threats to guide test activities.
Effectively communicate identified threats using language that is suitable for the target audience.
Identify relevant test objectives based on business needs.
Develop and scale services and infrastructure critical to ensure the privacy of vehicle owners and operators, implementing privacy standards and mitigating vulnerabilities.
Compensation
In addition to a competitive base salary, full-time positions may be is eligible to participate in our annual company performance bonus program. This role is also eligible for equity in the form of Restricted Stock Units (RSUs)
Responsibilities
Develop and scale privacy services and infrastructure
Implement privacy roadmap and strategy
Build, support, and maintain in-house privacy critical services
Mitigate vulnerabilities found or reported by internal and external parties
Implement privacy/personal data protections to comply with regulations and industry standards
Requirements
Master’s degree in Computer Science, Information Technology, Privacy Engineering, or a closely related field
Lead product security for Vecima’s software and hardware platforms, driving threat modelling, secure design, and vulnerability management across embedded Linux and cloud‑connected products.
Locations (2)
United States
Canada
Responsibilities
Identify and reduce security risk throughout the product lifecycle
Lead threat modelling for new products and architecture changes
Translate security risks into engineering requirements
Coach developers and architects in secure design and coding
Improve secure product development through risk‑based activities and automated CI/CD checks
Lead the design and governance of enterprise-wide security architecture across multi‑cloud environments, modern infrastructure, and business applications.
Responsibilities
Define security vision, reference models, design patterns, and strategic roadmaps
Lead, mentor, and grow a team of Cyber Security Architects
Establish and maintain the Enterprise Cyber Security Architecture framework
Serve as key representative in Architecture Review Board
Align security architecture strategy with business transformation and compliance