DevSecOps Engineer at Livingston International

Toronto, Ontario, Canada -

Full Time

Start Date

Immediate

Expiry Date

21 Mar, 26

Salary

0.0

Posted On

21 Dec, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

CI/CD Platforms, Infrastructure as Code, Container Security, Security Vulnerabilities, Secure Coding Practices, AWS, Google Cloud, Automated Security Testing, Threat Modeling, Secure Code Reviews, Cross-Functional Collaboration, DevOps, Microservices Architectures, Security Metrics, Application Security

Industry

International Trade and Development

Description

DevSecOps Engineer Join Livingston, the largest customs broker in Canada and the third largest entry filer in the U.S. We’re a market leader offering customs brokerage, consulting and compliance, and freight forwarding services at more than 90 key locations in North America, Europe and Asia. Customs brokerage is our core business and helping our customers navigate the complex and changing world of international trade is what we do best. Consider joining our team for the opportunity to grow your career. From entry level to expert advisors, our supportive culture of learning will help you get the career you want. JOB SUMMARY Are you a passionate, high-energy engineer who dreams in YAML and thinks firewalls are just misunderstood friends? We're on the hunt for someone who can blend security into our CI/CD pipelines like a barista blends espresso—smooth, strong, and absolutely essential. You'll automate all the things, squash vulnerabilities before they even think about showing up, As a day in the life, you will help build secure, scalable and resilient systems from the ground up and responsible for integrating security best practices into the development lifecycle and CI/CD pipelines. This role ensures Infrastructure as Code (IaC), applications, and deployment processes are scalable, and compliant. If you are someone who thrives on cross-functional collaboration- partnering with developers, operations, and security teams to automate and optimize security controls and reduce risk throughout the SDLC- we would be excited to connect with you. KEY DUTIES & RESPONSIBILITIES Embed security controls into CI/CD pipelines, source code repositories, and containerization platforms. Develop and maintain automated security testing tools for static (SAST), dynamic (DAST), and dependency (SCA) analysis. Perform threat modeling and secure code reviews for cloud-native and microservices architectures. Partner with DevOps and engineering teams to build infrastructure as code (IaC) with secure baselines. Define and enforce security requirements in build and deployment processes. Monitor security metrics across development pipelines and respond to incidents related to application security. KNOWLEDGE & SKILLS Strong experience with CI/CD platforms (i.e. - GitHub Actions, GitLab, Jenkins, etc.). Hands-on knowledge of IaC (i.e. - Terraform, CloudFormation) and container security (i.e. - Docker, Kubernetes). Familiarity with common security vulnerabilities (OWASP Top 10) and secure coding practices. Experience using AWS and Google Cloud WORK EXPERIENCE – MINIMUM REQUIRED 3 years of related experienceEDUCATION Required: Bachelors Degree or equivalent in Computer ScienceAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. For Canada: Livingston is an equal opportunity employer and committed to creating and sustaining an inclusive environment in which all individuals are treated with dignity, respect and one which reflects the diversity of the community in which we operate. Accommodations are available for applicants and employees with disabilities throughout the recruitment process. If you require accommodations for interviews or other meetings, please advise when submitting your application.

Responsibilities

The DevSecOps Engineer will embed security controls into CI/CD pipelines and develop automated security testing tools. They will also partner with teams to build secure infrastructure and monitor security metrics.