Top Cyber Security Jobs in Toronto

Owns enterprise AI customer deployments from discovery and product scoping through delivery, adoption, and measurable value. Translates customer workflows into product requirements, deployment roadmaps, and technical solutions while partnering with engineering, sales, finance, legal, security, and customer success. Evaluates AI-specific considerations, business cases, risks, and product opportunities, then converts recurring customer needs into scalable capabilities and operating playbooks.

Build and operate cloud security platforms protecting PagerDuty’s AWS and Kubernetes environments. Harden EKS, Istio, containers, IAM, PKI, and encryption; automate controls with Python, Go, Terraform, and policy-as-code. Shape detections, threat hunting, incident response, and compliance evidence across FedRAMP environments. Partner with engineering, AppSec, and GRC teams, develop AI-assisted security automation, participate in on-call, mentor teammates, and lead security initiatives.

Own and evolve the security master across multiple asset classes, ensuring reference-data quality, governance, controls, reconciliation, and integrity. Lead vendor data sourcing, identifier cross-referencing, corporate actions, exception management, and new instrument onboarding. Partner with technology, operations, compliance, and business teams on data models, EDM platforms, regulatory requests, and reference-data capabilities. Requires strong capital-markets reference-data expertise, SQL, and experience with EDM platforms and data-governance frameworks.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Partner with sales teams to win strategic data security opportunities. Deliver technical presentations, gather customer requirements, lead product evaluations, configure solutions, and design test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection knowledge, AI fluency, and collaboration across matrixed go-to-market and partner teams.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Provides second-level and Tier-3 managed security services, including SIEM and EDR administration, detection engineering, incident investigation, threat hunting, vulnerability assessment, and security analytics. Mentors analysts, develops playbooks and automated workflows, improves service processes, supports client accounts, delivers security briefings, and provides technical recommendations. Requires participation in 24/7 operations, including weekends, holidays, and overtime.

Conduct red team operations, adversary simulations, penetration testing, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services; identify attack paths and configuration weaknesses; validate detection and response capabilities; track emerging attacker techniques; and drive remediation through concise reporting and stakeholder communication.

Deliver enterprise WAF migrations to Cloudflare and/or Akamai, including application onboarding, security policy implementation, DNS and traffic-routing changes, testing, troubleshooting, cutovers, and post-migration stabilization. Collaborate with architecture, security, network, and application teams to validate functionality, security, and performance while resolving migration and production issues.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Design, implement, monitor, and enhance network security and DLP controls across enterprise networks, endpoints, email, cloud, and web environments. Investigate security events, incidents, vulnerabilities, data leakage, and policy violations; perform root-cause analysis; coordinate remediation; and advise clients on network resilience, data protection, and practical security improvements. Collaborate with infrastructure, cloud, IAM, risk, compliance, privacy, and business teams in complex financial services environments.

Conduct AI-driven security assessments across software, hardware, and firmware; develop AI-enabled offensive and defensive security tooling; identify and remediate vulnerabilities; test LLMs, agentic workflows, and cloud environments; and guide organization-wide AI security strategy. Partner with engineering and leadership, lead threat-modeling sessions, and communicate security findings and recommendations to senior stakeholders.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Analyzes, implements, and improves enterprise information security systems across endpoint, network, cloud, data, and SOC environments. Manages security platforms, vulnerabilities, asset discovery, monitoring events, firewall changes, risk indicators, and compliance controls. Develops security automation and scripts, maps defenses to MITRE ATT&CK and OWASP, contributes to incident response and AI security reviews, and supports security policies, technical documentation, and risk management.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to stakeholders, build investigation tools and automated workflows, and improve security operations processes. The role requires Python scripting, SIEM experience, cloud security knowledge across AWS and GCP, and forensic analysis across macOS, Windows, and Linux.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the detection lifecycle, advance detection-as-code with Git, testing, CI/CD, and observability, and improve data ingestion and enrichment. Evaluate AI-assisted security capabilities, translate threat intelligence into detections, and partner with Security Operations during investigations and incident exercises. The role requires strong Python and SQL skills, SIEM expertise, AWS and Linux knowledge, and independent project leadership.

Lead execution on ambiguous, high-stakes technical problems across real-time AI workflows, reliability, AI infrastructure, healthcare integrations, and security. Make architectural decisions, de-risk strategic projects, drive initiatives to completion, establish engineering standards, apply product judgment, and improve team effectiveness through strong technical leadership and mentorship.

Provides second-level cybersecurity incident response and client support within a 24/7 managed detection and response operation. Monitors, investigates, remediates, and resolves cyber incidents; escalates complex issues; performs root-cause analysis and ticket quality reviews; and supports SLA adherence. The role improves SOC analytics and processes, mentors junior analysts, participates in use-case and SOP development, supports customer activations, and pursues relevant security certifications.

Lead architecture and platform strategy for Security Solutions, define reusable patterns and prototypes, translate product needs into technical designs, enable PDLC from concept to production, build prototypes to validate concepts (including AI-assisted coding), and influence cross-functional teams on agentic and AI-driven solutions.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Drive Platform Cloud sales across Canada's Growth Business segment, focusing on data security, governance, compliance, and ALM solutions. Partner with core account executives, generate leads, manage full sales cycles, develop territory plans, exceed quotas, educate internal teams, collaborate with partners, negotiate deals, and serve as a trusted customer advisor.

Manages enterprise End User Computing governance technology solutions, including deployment, adoption, product roadmaps, requirements, inventory, controls, reporting, and continuous improvement. Partners with Technology, Information Security, Risk, vendors, and business segments to translate governance objectives into delivery priorities, oversee implementation, monitor KPIs and KRIs, support assurance reviews, and remediate findings.

Designs, operates, and enhances enterprise cryptographic security platforms, including Venafi, ISG Crypto Vulnerability Scanner, and HashiCorp Vault. Builds automation and integrations, implements risk-driven controls, supports cloud and container security, and participates in incident response and 24/7 on-call rotations. The role leads security initiatives, audits, technology evaluations, project transitions, documentation, and collaboration with infrastructure, application, operations, vendors, and security teams.

Manages governance, risk, control, and information security issue-management activities for Global Technology Services. Leads remediation standards, risk reporting, control initiatives, and lifecycle optimization across the three lines of defense. Partners with BISO teams, auditors, regulators, executives, and board-level stakeholders; produces risk reporting and drives complex cross-functional programs. Requires strong governance expertise, analytical and reporting skills, stakeholder communication, and experience with GRC, issue management, internal audit, or control testing.