Top Cyber Security Jobs in Toronto

Lead architecture and platform strategy for Security Solutions, define reusable patterns and prototypes, translate product needs into technical designs, enable PDLC from concept to production, build prototypes to validate concepts (including AI-assisted coding), and influence cross-functional teams on agentic and AI-driven solutions.

As a Senior Software Engineer in Server Security, you will enhance MongoDB's security features, focusing on distributed systems, cryptography, and networking protocols while collaborating across teams to ensure quality and security best practices.

Protect enterprise users, assets, and locations by investigating threats and malware, implementing DLP and SIEM detections, securing SaaS and endpoints, hardening configurations, driving vulnerability remediation, automating alerts and reporting, participating in on-call incident response, and mentoring junior engineers.

Design, build, and operate enterprise identity and endpoint security systems. Implement lifecycle automation, SSO/SCIM provisioning, phishing-resistant MFA, conditional access, endpoint hardening and EDR operations. Build automation and AI agents to reduce manual work, run the enterprise security program, monitor metrics, and partner on telemetry and incident response.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.

Lead cloud security engagements for financial services in Canada, supporting pre- and post-sales, questionnaires, incident investigations, threat analysis, and AI/GenAI risk discussions. Drive customer meetings, presentations, cross-functional remediation, design improvements, and contribute to security messaging, contract negotiations, and industry standards participation.

Drive go-to-market strategy and launch execution for security products (identity, fraud, dispute, cybersecurity). Align product, sales, marketing, operations, and partners; create enablement materials, monitor adoption and performance, and influence roadmap with market insights.

Design, develop, and maintain enterprise authentication capabilities on a Unified Authentication Platform. Integrate IAM platforms (Ping, IBM ISAM), implement Passkeys (FIDO2/WebAuthn), MFA, OAuth2/OIDC/SAML token lifecycle, REST APIs, and directory integrations. Apply secure coding and collaborate with architecture and DevSecOps teams to deliver scalable, secure identity solutions.

Provide on-site technical support for studio, content-creation and presentation systems; install, configure, maintain and troubleshoot broadcast and IT infrastructure (virtualization, IP networks, servers, databases); work with vendors and internal teams to implement video-over-IP, cloud services and automated workflows; document technical specs and support users under tight deadlines; participate in rotating on-site shifts.

Lead enterprise architecture strategy focused on Data and AI. Define standards, future-state capabilities, and capability mapping. Drive modernization, governance integration, tool selection, risk management, and adoption of modern stacks. Produce architecture artifacts, mentor architects, and collaborate with senior IT and business leaders to align roadmaps and deliverables.

Lead enterprise architecture strategy focused on Data and AI: define standards, future-state capabilities, and capability mapping; analyze systems for modernization; integrate architecture with data governance; guide solution design, select modernization tools, manage technical risks, mentor architecture team, and collaborate on roadmaps, LCM and decommissioning while driving adoption of modern technology stacks.

Lead Cloudflare through the CCCS CSP ITS assessment, maintain CCCS requirements in the common control framework, drive cross-functional security control implementation, improve security compliance maturity, shape security policy and governance, and work with auditors and regulators. Occasional travel required.

Lead multi-year product strategy for non-human identity and security across MongoDB Atlas, core DB engine, and developer platforms. Drive workload identity federation, passwordless/zero-trust access, MCP/AI agent authorization, developer-first access management, partner with engineering, UX, and GTM to prioritize and measure adoption, and represent MongoDB at industry events and customer briefings.

Own application-layer risk identification and remediation across consumer products and APIs. Build and operate AppSec tooling, Harden auth/authorization and GraphQL security, run HackerOne and offensive testing, lead threat modeling and security reviews, and build AI agents to automate triage and remediation while embedding secure-by-default practices into engineering workflows.

Design, operate, and improve cloud security for a multi-account AWS environment and Kubernetes clusters. Build detection, prevention, and automated remediation workflows, drive zero-trust access, shift-left security in pipelines, integrate cloud security tooling, mentor engineers, and partner with infrastructure teams on identity, networking, and secrets management.

Manage an assigned territory supporting SLED: generate pipeline from prospecting to close, provide presales support, align with channel and reseller partners, track opportunities in Salesforce, run demos via online tools, forecast revenue, meet quotas, and report on opportunities to grow company revenue.

Lead the 0-to-1 strategy and roadmap for Harvey's legal operations platform, partnering with engineering, design, GTM, and customers to build governance, visibility, and vendor-management features. Drive discovery through launch, define success metrics, and enable enterprise adoption for procurement and compliance-driven buyers.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, automate GRC workflows with Python and agentic coding tools, maintain integrations across ticketing and risk platforms, and develop dashboards and reporting. Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to support risk-informed decisions and mature security governance processes.

Lead Forward Financing’s application and product security program, including pentesting, code review, vulnerability remediation, AI security testing, secure SDLC practices, and external exposure controls. Manage and develop senior security engineers, establish testing standards and remediation SLAs, build security services, and partner with engineering and executives to prioritize risk across web applications, APIs, cloud infrastructure, and AI-built software.

Supports application security across product and engineering teams by reviewing code, configurations, designs, logs, and vulnerabilities. Assesses and prioritizes risks, guides remediation, contributes scripts, detections, tests, secure defaults, and automation, and improves vulnerability management workflows. Collaborates with technical and non-technical stakeholders to communicate risk, recommend mitigations, and connect AppSec practices to customer trust, compliance, resilience, and business outcomes.

Supports application security across product and engineering teams by reviewing code, configurations, designs, vulnerabilities, and pull requests. Helps triage and prioritize security findings, provides remediation guidance, develops scripts and automation, and promotes secure coding practices. The role communicates risk to technical and non-technical stakeholders, collaborates cross-functionally, and develops offensive, defensive, and software engineering skills.

Lead detection, incident response, and digital forensics across macOS/Windows/Linux; act as Incident Commander, triage alerts, use SIEM, build investigation scripts and automated runbooks, collaborate with stakeholders on insider threat and security operations improvements.

Manage security operations, incident response, detection engineering, vulnerability and patch oversight, SaaS and endpoint security, cybersecurity risk assessments, and AI security strategy. Lead and develop security engineers, serve as senior Incident Commander, tune CrowdStrike detections, build coverage across endpoint, SaaS, identity, cloud, and proxy signals, and communicate security risks to technical and executive stakeholders.