Top Cyber Security Jobs in Toronto

Architects and engineers managed Microsoft security services, including backend components, integrations, orchestration, and automation. Designs solutions, supports customer onboarding, leads technical R&D and service enhancements, conducts architectural discussions, and trains internal teams. The role requires deep Microsoft Security, cloud, data center, networking, storage, and security expertise, customer-facing technical leadership, and relevant Microsoft certifications.

Leads a distributed cloud support team as a hands-on technical player-coach. Responsibilities include resolving complex customer issues, managing escalations and incidents, monitoring support quality and queue health, mentoring engineers, improving processes, creating technical documentation and training, and coordinating with Engineering, Product, Security, Legal, Billing, and global support teams.

Own and respond to customer-facing and internal security incidents, cases, findings, and inquiries. Triage investigations, coordinate escalations, communicate security risks, improve documentation and processes, deliver security training, and develop AI solutions for automation. The role collaborates with Legal and global teams, participates in on-call rotations, and requires eligibility for Canada Reliability Status clearance.

Coordinate enterprise cloud hardening and security remediation initiatives, manage audit and regulatory commitments, oversee evidence collection, and maintain remediation governance. Develop plans, schedules, risk registers, dashboards, and executive reporting while coordinating Information Security, Cloud Engineering, Technology Risk, Compliance, Audit, and business stakeholders. Translate security and control requirements into actionable plans, strengthen accountability, track vulnerabilities and control gaps, and ensure remediation outcomes are measurable, traceable, and audit-ready.

Leads security architecture and secure development lifecycle activities for Arm IP and SoC products. Defines Root of Trust, secure boot, key management, confidential computing, cryptographic, authentication, and encryption solutions. Owns threat modeling, security requirements, documentation, verification and validation plans, certification readiness, and SDL governance from architecture through post-silicon delivery. Coordinates audits, penetration testing, issue resolution, and security sign-off while mentoring global engineering teams.

Owns Opendoor’s enterprise identity control plane, including workforce authentication, passwordless access, session policies, non-human and AI-agent identities, lifecycle automation, access governance, and identity-as-code. Builds Okta integrations and first-party tooling, enforces secure defaults across SaaS and AI tools, supplies identity telemetry to detection systems, supports incident response, and mentors security and IT engineers.

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Design and build AI security tools, conduct penetration testing and red teaming, assess AI applications and third-party technologies, and establish secure development standards. Integrate automated security testing into CI/CD pipelines, evaluate risks such as prompt injection and data leakage, troubleshoot production systems, and collaborate with engineering, security, customers, vendors, and business stakeholders.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Design and verify hardware security IP and embedded processor subsystems for SoCs. Develop test plans, UVM/SystemVerilog/Verilog and C testbenches, verification models, and test strategies. Debug failures, ensure functional coverage, and support power and performance optimization. Work with design and project management teams, improve verification methodologies, and mentor engineers. Focus areas include cryptography, key management, secure boot, hardware roots of trust, ARM architectures, multi-clock and multi-power domains, and firmware/hardware co-verification.

Build and operate cloud security platforms protecting PagerDuty’s AWS and Kubernetes environments. Harden EKS, Istio, containers, IAM, PKI, and encryption; automate controls with Python, Go, Terraform, and policy-as-code. Shape detections, threat hunting, incident response, and compliance evidence across FedRAMP environments. Partner with engineering, AppSec, and GRC teams, develop AI-assisted security automation, participate in on-call, mentor teammates, and lead security initiatives.

Lead hardware and embedded security across Motive devices, including secure boot, firmware, FOTA, manufacturing, threat modeling, architecture reviews, and lifecycle risk management. Partner with hardware and engineering teams to define security requirements, validate controls, remediate findings, and build secure-by-default components. Address hardware, IoT, cloud, runtime, supply chain, and application security across device lifecycles.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Own the strategy, roadmap, architecture, and execution of PagerDuty’s platform security. Responsibilities include identity and permissions, authentication and authorization, secrets management, admin security tooling, security reviews, risk tiering, security programs, customer-facing controls, partner governance, incident escalation, and cross-functional alignment. The role requires leading security architecture decisions, managing migrations and authentication changes, measuring risk reduction, mentoring product managers, and influencing engineering and product practices in a B2B SaaS environment.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Owns enterprise data-services product roadmaps, backlogs, specifications, prioritization, delivery, adoption, and success metrics. Partners with UX, engineering, AI, data, and energy-domain experts to transform advisory workflows and deliver secure, integrated, AI-enabled platform capabilities. Leads discovery, cross-functional delivery, rollout, stakeholder communication, and continuous improvement across global user groups.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead hardware and embedded security for Motive devices: establish secure-by-default baselines (boot chain, firmware, FOTA, manufacturing), perform threat modeling and architecture reviews, define security requirements, drive remediation with hardware teams, and build scalable security components and automation across device lifecycle and cloud-connected infrastructure.

Conduct information security assessments, threat and vulnerability scans, and risk reviews for planned and unplanned initiatives. Interpret requirements and architecture diagrams, provide risk-based security recommendations, and balance business needs with security concerns. Support cybersecurity governance by advising on management processes and contributing to security policies and procedures. Collaborate with senior leaders and stakeholders to strengthen information system security and data protection.

Operate and mature the company’s security and compliance program by maintaining controls, policies, evidence, risk registers, vendor reviews, customer questionnaires, audit activities, privacy documentation, training, and incident-response readiness. Partner with engineering and cross-functional teams to manage remediation, assess security risks, support SOC 2 assurance, and improve customer evidence readiness without unnecessary bureaucracy.

Manage data security operations, including sensitive data discovery, classification, protection, remediation, encryption, and data security posture management. Advise business and technology stakeholders on data exposures, controls, privacy, governance, and risk-based remediation. Support Microsoft Information Protection activities, reporting, executive communications, and security initiatives across the organization.

Leads a cybersecurity governance and compliance team while transforming traditional GRC into a technical security risk advisory function. Responsibilities include developing operating models, evaluating remediation and risk acceptance, improving security controls, coordinating assessments and audits, aligning with regulatory frameworks, reporting risk metrics to senior leadership, and building team capabilities. The role requires extensive cybersecurity leadership, governance, assurance, risk management, and organizational transformation experience.

Leads enterprise cybersecurity strategy, governance, assurance, security operations, incident response, cyber resilience, security engineering, identity, cloud, application, AI, data, third-party, and human risk programs. Advises executives, oversees audits and regulatory obligations, manages material cyber incidents, establishes security architecture and control requirements, and leads the Information Security team, budget, vendors, operating model, and capability roadmap.