Top Cyber Security Jobs in Toronto

Serve as the senior technical authority for security engineering in Canada's regulated environment. Engineer and operate security controls across on-premises, cloud, and isolated infrastructure; build automation and infrastructure-as-code; support identity, vulnerability, logging, and cloud security tooling; drive remediation against CIS and NIST baselines; and produce operational and executive security posture reporting.

Engineer and operate enterprise security controls across on-premises, cloud, and isolated environments. Build security automation and infrastructure-as-code, partner with infrastructure and application teams on remediation and CIS/NIST compliance, support identity, vulnerability, logging, and cloud security tooling, and produce executive security posture reporting. The role requires Canadian residency or citizenship/permanent residency and Government of Canada Reliability Status screening.

Serve as the senior technical authority for security engineering in Canada’s regulated environment. Engineer and operate security controls across cloud, on-premises, and isolated infrastructure; build automation and infrastructure-as-code; support identity, vulnerability, logging, and cloud security tooling; drive remediation against CIS and NIST baselines; and produce security posture reporting. The role requires expertise in Linux, automation, DevOps, network security, system hardening, and at least two specialized security domains.

Leads pre-sales solution design for Canadian public sector customers in Ontario. Conducts discovery, architects secure and scalable Cisco-based solutions, develops technology roadmaps, delivers technical presentations and demonstrations, supports proposals and proofs of concept, and advises stakeholders on technical trade-offs and business value. The role requires enterprise architecture experience, expertise across multiple technology domains, public-sector exposure, technical documentation skills, and collaboration with account executives, partners, and customers.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. Secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, identity lifecycle automation, and policy guardrails. Builds monitoring for anomalous access, supports incident response, conducts threat modeling, and maintains reliable IAM services with on-call responsibilities. Requires substantial security engineering and IAM experience, knowledge of modern identity protocols, programming or scripting proficiency, and security automation expertise.

Designs, deploys, and operates security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premises systems. Secures AI agents and non-human workloads through authentication, authorization, networking, policy-as-code, infrastructure-as-code, and automation. Addresses prompt injection, data and model poisoning, AI supply-chain risks, and MCP integrations. Leads security initiatives, infrastructure hardening, governance, and cross-functional efforts while participating in on-call rotations.

Leads a distributed cloud support team as a hands-on technical player-coach. Responsibilities include resolving complex customer issues, managing escalations and incidents, monitoring support quality and queue health, mentoring engineers, improving processes, creating technical documentation and training, and coordinating with Engineering, Product, Security, Legal, Billing, and global support teams.

Manage Mastercard’s North America security solutions portfolio across the product lifecycle. Develop go-to-market and commercialization strategies, coordinate launches, enable sales, monitor performance, conduct market research, and drive customer adoption and revenue growth. Partner with product, sales, account management, customer success, and external stakeholders while serving as a subject matter expert for product development and customer engagements.

Monitor, triage, and investigate security alerts across identity, endpoint, email, SaaS, and cloud environments. Conduct routine incident investigations, gather evidence, document findings, support major incident response, and contribute to containment and recovery. Improve runbooks, tune detections, develop small scripts and automated workflows, and participate in post-incident reviews. Communicate clearly with global teammates while developing technical skills in security operations, incident response, threat detection, and automation.

Build and operate Affirm’s insider threat program, including investigative standards, detection use cases, controls, metrics, and reporting. Support insider risk investigations through telemetry and evidence analysis, threat modeling, and written recommendations. Partner with Legal, HR, Privacy, and Compliance on case handling and regulatory obligations. Improve DLP, endpoint monitoring, access governance, and SaaS security controls. Automate evidence collection, case routing, triage, and investigation workflows using Python, automation platforms, and agentic AI.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

Leads Affirm’s global security incident response and investigations program. Responsibilities include serving as incident commander, directing technical investigations, managing and developing response engineers, establishing readiness practices, improving detection and response tooling, implementing AI-assisted investigation workflows, and translating incident metrics into executive and board-level reporting.

Own and respond to customer-facing and internal security incidents, cases, findings, and inquiries. Triage investigations, coordinate escalations, communicate security risks, improve documentation and processes, deliver security training, and develop AI solutions for automation. The role collaborates with Legal and global teams, participates in on-call rotations, and requires eligibility for Canada Reliability Status clearance.

Coordinate enterprise cloud hardening and security remediation initiatives, manage audit and regulatory commitments, oversee evidence collection, and maintain remediation governance. Develop plans, schedules, risk registers, dashboards, and executive reporting while coordinating Information Security, Cloud Engineering, Technology Risk, Compliance, Audit, and business stakeholders. Translate security and control requirements into actionable plans, strengthen accountability, track vulnerabilities and control gaps, and ensure remediation outcomes are measurable, traceable, and audit-ready.

Build and operate enterprise identity and access management systems at Affirm. Responsibilities include IAM lifecycle operations, access troubleshooting, automation, backend services, APIs, integrations, monitoring, and production support. The role focuses on SailPoint, Auth0, workforce identity events, secure infrastructure, and collaboration with Security, IT, and Engineering. Candidates should have software engineering experience, backend development skills, cloud familiarity, and knowledge of IAM technologies.

Leads Affirm’s third-party security risk management program, including international market due diligence, M&A security assessments, post-acquisition vendor integration, control evaluations, threat modeling, and remediation tracking. Designs automated workflows and integrations across GRC, ticketing, cloud, and identity systems using Python and agentic coding tools. Establishes processes, metrics, dashboards, and reporting while advising Legal, Procurement, Engineering, Finance, Compliance, Privacy, and leadership on security risks and decisions.

Conduct cyber threat hunting across enterprise and cloud environments using internal and external intelligence. Identify threats, vulnerabilities, anomalous activity, and security control gaps; develop detection logic, mitigation recommendations, dashboards, and hunting methodologies. Tune detection infrastructure, improve playbooks, analyze host and network data, and collaborate with intelligence, SOC, incident response, and security engineering teams. Serve as a subject matter expert while strengthening enterprise information security practices.

Leads enterprise cybersecurity strategy as CISO, advising the Board and executive teams on security posture, risk, resilience, and investment. Oversees security governance, compliance, AI governance, third-party risk, SOC operations, incident response, penetration testing, IAM, PAM, end-user technology, and crisis recovery across corporate, cloud, broadcast, and operational technology environments. Manages budgets, major technology contracts, and senior cybersecurity leaders while driving security culture and transformation.

Manage privileged credentials using the CyberArk PAS suite, including credential onboarding, vaulting, access changes, and session management. Handle IAM requests, perform compliance and risk analysis, maintain access-management controls, and ensure adherence to bank policies. Collaborate with clients and project teams, troubleshoot issues across infrastructure platforms, provide subject-matter expertise, and participate in rotational on-call support.

Originate and close complex cybersecurity and operational technology sales opportunities within enterprise accounts. Lead the full sales cycle, engage C-suite stakeholders, shape proposals with internal technical teams, manage $4–7M sales targets, negotiate contracts, and build trusted client relationships. The role requires technology sales expertise, cybersecurity and OT knowledge, enterprise account hunting experience, and travel ranging from 25% to 100%.

Leads end-to-end response to high-priority cybersecurity incidents, including investigation, containment, eradication, recovery, evidence preservation, reporting, and remediation. Provides escalation support and mentorship to incident response analysts, develops playbooks and automation, manages incident response procedures, conducts security exercises, assesses risks, and tracks operational metrics. Collaborates with infrastructure, cloud, identity, application, legal, privacy, and risk teams while participating in a 24/7 on-call rotation.

Performs application, API, cloud, and infrastructure security testing; assesses vulnerabilities, security controls, and risk; supports remediation and audit evidence collection. The role maintains compliance with NIST, PCI-DSS, ISO 27001, SOC, COBIT, and ITIL frameworks, partners with technical teams, reports risks to leadership, and develops security testing plans and workflows.

Designs, implements, and operates enterprise authentication and identity solutions, including SSO, MFA, Conditional Access, and IAM platforms across Azure, AWS, and GCP. Integrates applications using SAML, OAuth, OIDC, and SCIM; collaborates with application teams; troubleshoots access issues; maintains security documentation; and supports strategic IAM initiatives aligned with ISO 27001 and NIST.

Drive Platform Cloud sales across Canada's Growth Business segment, focusing on data security, governance, compliance, and ALM solutions. Partner with core account executives, generate leads, manage full sales cycles, develop territory plans, exceed quotas, educate internal teams, collaborate with partners, negotiate deals, and serve as a trusted customer advisor.

Leads security operations across SIEM, MDR, EDR, and endpoint protection platforms. Develops threat detection rules, analytics, runbooks, and playbooks; manages SOC vendors and security reporting; coordinates red and purple team exercises; and leads incident response, forensic investigations, containment, recovery, and root-cause analysis. Supports compliance assessments, regulatory inspections, vulnerability remediation, threat hunting, security automation, and communication of security posture to leadership.