Top Cyber Security Jobs in Toronto

Lead architecture and platform strategy for Security Solutions, define reusable patterns and prototypes, translate product needs into technical designs, enable PDLC from concept to production, build prototypes to validate concepts (including AI-assisted coding), and influence cross-functional teams on agentic and AI-driven solutions.

Provides managed detection and response services using Microsoft Sentinel and Defender. Responsibilities include deploying, tuning, and optimizing SIEM platforms; onboarding and supporting customers; serving as a technical escalation point; conducting service reviews and quality assurance; improving processes, SOPs, and automation; developing security use cases and reports; mentoring teams; delivering training; and performing on-call coverage.

Monitors and investigates security alerts across SIEM, SOAR, EDR/XDR, firewall, and threat-intelligence platforms. Performs incident triage, analysis, response, escalation, malware and vulnerability management, and security-system troubleshooting. Supports tuning and process optimization, follows ITIL practices, documents procedures, and maintains customer security records. The role requires 24x7 availability, 12-hour shifts, ongoing threat awareness, and eligibility for a Government of Canada Level 2 Secret clearance.

Leads technical strategy and architecture for a global business division, defining target-state architecture, standards, integration patterns, and technology roadmaps. Represents the division on architecture reviews, aligns initiatives with enterprise platforms, establishes reusable capabilities, and advises senior stakeholders. Provides hands-on technical guidance, mentorship, and forward-deployed engineering support while advancing AI-enabled delivery, security, reliability, governance, scalability, and operational excellence.

Own the technical strategy, target architecture, standards, and roadmap for a global digital platform. Lead engineering teams, guide architecture and integration decisions, partner with senior stakeholders, and apply AI-enabled delivery responsibly. Establish requirements for security, reliability, governance, observability, scalability, and operational excellence while developing technical talent and driving reusable digital capabilities.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead hardware and embedded security across Motive devices, including secure boot, firmware, FOTA, manufacturing, threat modeling, architecture reviews, and lifecycle risk management. Partner with hardware and engineering teams to define security requirements, validate controls, remediate findings, and build secure-by-default components. Address hardware, IoT, cloud, runtime, supply chain, and application security across device lifecycles.

Lead Cisco's technical strategy with Canadian channel partners by developing and delivering partner-focused technical solutions across networking, security, cloud, AI infrastructure and collaboration. Build executive relationships, influence partner technical leads, co-develop differentiated offerings, present customized technology solutions, and collaborate with internal product and sales teams to drive partner sales acceleration and best-practice architectures.

Provides first-level managed security services support for network security clients in a 24/7 operations environment. Monitors and resolves security requests, escalates complex issues, communicates incident updates, tracks SLA breaches and service trends, and maintains knowledge-base documentation. The role requires firewall administration experience with Palo Alto and Check Point, familiarity with AWS, Azure, and GCP, participation in firewall projects, ongoing training, and willingness to work weekends, holidays, overtime, and rotating coverage.

Lead Cloudflare through the CCCS CSP ITS assessment, maintain CCCS requirements in the common control framework, drive cross-functional security control implementation, improve security compliance maturity, shape security policy and governance, and work with auditors and regulators. Occasional travel required.

Lead cloud security direction across AWS, GCP, and self-managed Kubernetes. Define standards, reference architectures, IAM controls, threat-modeling practices, detections, incident-response playbooks, vulnerability-management workflows, and secure infrastructure-as-code and CI/CD practices. Serve as a senior incident responder and cloud-forensics lead, secure distributed systems and data stores, drive cross-functional initiatives, and mentor security and platform engineers as a senior individual contributor.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Conduct manual penetration testing, secure code reviews, and SAST triage across web applications, APIs, and AWS infrastructure. Develop AI-assisted security tooling, define testing approaches for LLM applications and agentic systems, and review AI-generated software before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while improving secure SDLC practices.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

As a Senior Software Engineer in Server Security, you will enhance MongoDB's security features, focusing on distributed systems, cryptography, and networking protocols while collaborating across teams to ensure quality and security best practices.

Protect enterprise users, assets, and locations by investigating threats and malware, implementing DLP and SIEM detections, securing SaaS and endpoints, hardening configurations, driving vulnerability remediation, automating alerts and reporting, participating in on-call incident response, and mentoring junior engineers.

Design, build, and operate enterprise identity and endpoint security systems. Implement lifecycle automation, SSO/SCIM provisioning, phishing-resistant MFA, conditional access, endpoint hardening and EDR operations. Build automation and AI agents to reduce manual work, run the enterprise security program, monitor metrics, and partner on telemetry and incident response.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.

Lead cloud security engagements for financial services in Canada, supporting pre- and post-sales, questionnaires, incident investigations, threat analysis, and AI/GenAI risk discussions. Drive customer meetings, presentations, cross-functional remediation, design improvements, and contribute to security messaging, contract negotiations, and industry standards participation.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Drive go-to-market strategy and launch execution for security products (identity, fraud, dispute, cybersecurity). Align product, sales, marketing, operations, and partners; create enablement materials, monitor adoption and performance, and influence roadmap with market insights.

Design and document solution and information architectures for client engagements, drive technical design reviews, support sales and project estimating, ensure quality implementation, conduct code reviews, and create reusable delivery assets focused on automation and cloud-native solutions.