DevSecOps Lead

Share Gate is the leading Microsoft 365 migration and governance platform, trusted by over 100,000 IT pros for its unmatched simplicity.

It offers the simplest, most reliable, and most affordable way to move business data to Microsoft 365.

Whether migrating from Google Workspace, file shares, Exchange Online, SharePoint On-Premises, or tenant‑to‑tenant, Share Gate gets the job done, without surprises. From cloud transformation to M&A integration, it keeps things just damn simple.

Share Gate also helps organizations stay in control once their data is migrated. Its powerful governance features let users assess environments, uncover issues, and apply fixes on the spot, so everything stays clean, secure, and optimized. It lays the groundwork for safe Microsoft Copilot deployment within organizations.

Share Gate is developed by Workleap Technologies, a Montréal‑based software company.

So, what will your new role look like?

As an Application Security Manager, you will be a hands‑on individual contributor responsible for embedding security directly into our products, pipelines, and development workflows. This is a deeply technical role where you will write code, build tooling, and work closely with developers to ensure security is a natural part of how we build and ship software.

You will join the AI‑ SDLC team, which builds internal platforms and tooling that enable AI agents to operate across the development lifecycle. Your mission will be to ensure that security is integrated from the ground up across these tools, pipelines, and agentic workflows—enabling secure‑by‑default product development at scale.

• Ensure security is embedded into CI/CD pipelines by delivering scalable, automated tooling and integrated security checks (SAST, DAST, SCA, secret scanning).
• Enable secure‑by‑default development by designing and implementing automated, policy‑driven security review workflows.
• Establish robust security guardrails within AI‑assisted development and agent workflows to reduce risk while maintaining developer velocity.
• Reduce risk exposure by proactively identifying, assessing, and driving remediation of application security vulnerabilities.
• Strengthen application security posture by leading threat modeling and security assessments for new features and architectural changes.
• Improve detection and response capabilities through the development of automation, tooling, and streamlined vulnerability management processes.
• Elevate cloud and application security by partnering with Infrastructure Sec Ops to harden Azure environments and deployment practices.
• Enhance external security feedback loops by contributing to and scaling the bug bounty program and vulnerability intake processes.

A typical week?

• Writing code for security tooling, CI/CD configurations, and automated review workflows.
• Designing and refining policy‑based security checks in pipelines.
• Building and improving guardrails for AI‑assisted development and agent workflows.
• Participating in architecture and design discussions with engineering teams.
• Collaborating with Infrastructure Sec Ops on shared security initiatives.
• Triaging and prioritizing security alerts and vulnerabilities.
• Sharing knowledge through pairing, code reviews, and informal coaching.

You will join the AI‑ SDLC team, responsible for building the internal platform that enables AI agents to operate across the Workleap and Share Gate development lifecycle. This includes developing agent pipelines, safety mechanisms, and developer‑facing tooling.

You will work closely with Infrastructure Sec Ops and partner with multiple product teams across the organization. This is a highly collaborative environment where your impact comes from building scalable solutions and making secure development the default for everyone.

What are the next challenges awaiting your team?

• Scaling automated security practices across a growing portfolio of SaaS products.
• Deepening security integration within Git Hub Actions and CI/CD pipelines.
• Ensuring security guardrails evolve alongside AI‑assisted and agentic development workflows.
• Strengthening secure‑by‑default…