About the company
BeyondTrust creates a safer world through its cybersecurity SaaS portfolio, with a culture of flexibility, trust, and continual learning.
Responsibilities
- Build and maintain the product security tooling pipeline integrated across the SDLC
- Implement and tune Claude Code Security, Codex Security, GitHub Advanced Security, and Wiz CLI across repositories and CI/CD pipelines
- Design and operate automated product security review workflows with human-in-the-loop checkpoints
- Ensure security tooling integrates cleanly into engineering workflows (GitHub PRs, CI/CD, IDE plugins)
- Leverage AI/LLM platforms to build automation that scales security engineering
- Support product incident response alongside the Product Security team
- Partner with Security Testers, Architects, TPM, and engineering teams
Requirements
- 4+ years in Application Security, Product Security, DevSecOps, or Security Engineering
- Experience implementing and tuning SAST, DAST, SCA, and secret scanning tools in GitHub-integrated environments
- Hands-on experience with AI-powered security tooling (Claude Code Security, Codex Security, or similar)
- Strong understanding of CI/CD pipeline architecture
- Experience building automation workflows: scripting, pipeline configuration, policy-as-code, webhook integrations
- Familiarity with container security scanning tools (Wiz CLI, Trivy, Snyk Container) and cloud security fundamentals (AWS preferred)
- Automation-first mindset
Conditions
- Remote position in Canada