Analyst, Application Security DevOps

At Bombardier, we design, build and maintain the world’s peak-performing aircraft for the world’s most discerning people and businesses, governments and militaries. We have been successful in setting the highest standards by putting our people at the heart of it all, and defining excellence, together.

Working at Bombardier means operating at the highest level. Every day, you are part of a team that delivers superior experiences and products, pushing the boundaries of what's possible in our industry and beyond. By prioritizing employee growth and development, we empower everyone to reach their full potential on their own terms, because the best work happens when you are free to be yourself and share your unique expertise.

With our employees’ well-being top of mind, we offer a comprehensive and competitive Benefits Program, which includes the following:

• Insurance plans (Dental, medical, life insurance, disability, and more)
• Retirement savings plan
• Employee Assistance Program

Responsibilities:

• Develop cloud-based infrastructure and services integral to modern DevSecOps practices.
• Leverage SAST & DAST tools to analyze and remediate source code for vulnerabilities before compilation.
• Support the AWS cloud environment, ensuring optimal performance and security.
• Work with multiple teams developing, updating and enhancing their automated code pipelines for frontend, backend, AI/ML applications, API and data.
• Act as a security expert in the design, development, coding, testing, and debugging of the DevSecOps environment.
• Support and mentor other team members.
• Document and design business processes and produce technical documentation.
• Communicate risks and issues to the delivery manager and propose potential mitigation plans.

How to thrive in this role?

• You have proven experience as a DevSecOps Developer or similar role.
• You have strong experience with GitLab CI/CD tool and processes.
• You are familiar with security tools, frameworks, and standards (e.g., OWASP, NIST).
• You have experience with infrastructure as code (IaC) tools (e.g., Terraform).
• You are proficient in scripting languages (e.g., Python, Bash).
• You have experience with configuration management tools (e.g., Gitlab).
• You have a solid understanding of containerization technologies (e.g., Docker).
• You have hands-on experience with cloud platforms (e.g., AWS).
• You have an advanced degree in a related field.
• You have Security Certification in cloud platforms (e.g., AWS Certified DevOps Engineer).
• You have experience with monitoring and logging tools (e.g., Datadog).
• You have knowledge of security best practices in DevSecOps.

Please note: You don’t need all the skills, knowledge, and experience listed for this position! We’re not looking for the perfect candidate, we’re looking for great talent and resourcefulness.

Bombardier is an equal opportunity employer and encourages persons of any race, religion, ethnicity, gender identity, sexual orientation, age, immigration status, disability or other applicable legally protected characteristics to apply.

Job: Analyst, Application Security DevOps

Primary Location: Administrative Centre (CA)

Organization: Aerospace Canada

Shift: Day job

Employee Status: Regular

Requisition: 6113 Analyst, Application Security DevOps