Top Cyber Security Jobs in Toronto

Provides second-level cybersecurity incident response and client support within a 24/7 managed detection and response operation. Monitors, investigates, remediates, and resolves cyber incidents; escalates complex issues; performs root-cause analysis and ticket quality reviews; and supports SLA adherence. The role improves SOC analytics and processes, mentors junior analysts, participates in use-case and SOP development, supports customer activations, and pursues relevant security certifications.

Lead architecture and platform strategy for Security Solutions, define reusable patterns and prototypes, translate product needs into technical designs, enable PDLC from concept to production, build prototypes to validate concepts (including AI-assisted coding), and influence cross-functional teams on agentic and AI-driven solutions.

Provides managed detection and response services using Microsoft Sentinel and Defender. Responsibilities include deploying, tuning, and optimizing SIEM platforms; onboarding and supporting customers; serving as a technical escalation point; conducting service reviews and quality assurance; improving processes, SOPs, and automation; developing security use cases and reports; mentoring teams; delivering training; and performing on-call coverage.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Monitors and investigates security alerts across SIEM, SOAR, EDR/XDR, firewall, and threat-intelligence platforms. Performs incident triage, analysis, response, escalation, malware and vulnerability management, and security-system troubleshooting. Supports tuning and process optimization, follows ITIL practices, documents procedures, and maintains customer security records. The role requires 24x7 availability, 12-hour shifts, ongoing threat awareness, and eligibility for a Government of Canada Level 2 Secret clearance.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Leads technical strategy and architecture for a global business division, defining target-state architecture, standards, integration patterns, and technology roadmaps. Represents the division on architecture reviews, aligns initiatives with enterprise platforms, establishes reusable capabilities, and advises senior stakeholders. Provides hands-on technical guidance, mentorship, and forward-deployed engineering support while advancing AI-enabled delivery, security, reliability, governance, scalability, and operational excellence.

Own the technical strategy, target architecture, standards, and roadmap for a global digital platform. Lead engineering teams, guide architecture and integration decisions, partner with senior stakeholders, and apply AI-enabled delivery responsibly. Establish requirements for security, reliability, governance, observability, scalability, and operational excellence while developing technical talent and driving reusable digital capabilities.

Lead hardware and embedded security across Motive devices, including secure boot, firmware, FOTA, manufacturing, threat modeling, architecture reviews, and lifecycle risk management. Partner with hardware and engineering teams to define security requirements, validate controls, remediate findings, and build secure-by-default components. Address hardware, IoT, cloud, runtime, supply chain, and application security across device lifecycles.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Provides first-level managed security services support for network security clients in a 24/7 operations environment. Monitors and resolves security requests, escalates complex issues, communicates incident updates, tracks SLA breaches and service trends, and maintains knowledge-base documentation. The role requires firewall administration experience with Palo Alto and Check Point, familiarity with AWS, Azure, and GCP, participation in firewall projects, ongoing training, and willingness to work weekends, holidays, overtime, and rotating coverage.

Lead Cloudflare through the CCCS CSP ITS assessment, maintain CCCS requirements in the common control framework, drive cross-functional security control implementation, improve security compliance maturity, shape security policy and governance, and work with auditors and regulators. Occasional travel required.

Lead cloud security direction across AWS, GCP, and self-managed Kubernetes. Define standards, reference architectures, IAM controls, threat-modeling practices, detections, incident-response playbooks, vulnerability-management workflows, and secure infrastructure-as-code and CI/CD practices. Serve as a senior incident responder and cloud-forensics lead, secure distributed systems and data stores, drive cross-functional initiatives, and mentor security and platform engineers as a senior individual contributor.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Conduct manual penetration testing, secure code reviews, and SAST triage across web applications, APIs, and AWS infrastructure. Develop AI-assisted security tooling, define testing approaches for LLM applications and agentic systems, and review AI-generated software before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while improving secure SDLC practices.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

As a Senior Software Engineer in Server Security, you will enhance MongoDB's security features, focusing on distributed systems, cryptography, and networking protocols while collaborating across teams to ensure quality and security best practices.

Protect enterprise users, assets, and locations by investigating threats and malware, implementing DLP and SIEM detections, securing SaaS and endpoints, hardening configurations, driving vulnerability remediation, automating alerts and reporting, participating in on-call incident response, and mentoring junior engineers.

Design, build, and operate enterprise identity and endpoint security systems. Implement lifecycle automation, SSO/SCIM provisioning, phishing-resistant MFA, conditional access, endpoint hardening and EDR operations. Build automation and AI agents to reduce manual work, run the enterprise security program, monitor metrics, and partner on telemetry and incident response.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.

Lead cloud security engagements for financial services in Canada, supporting pre- and post-sales, questionnaires, incident investigations, threat analysis, and AI/GenAI risk discussions. Drive customer meetings, presentations, cross-functional remediation, design improvements, and contribute to security messaging, contract negotiations, and industry standards participation.