Top Cyber Security Jobs in Toronto

Protect enterprise users, assets, and locations by investigating threats and malware, implementing DLP and SIEM detections, securing SaaS and endpoints, hardening configurations, driving vulnerability remediation, automating alerts and reporting, participating in on-call incident response, and mentoring junior engineers.

Sells Microsoft cybersecurity solutions to enterprise and public-sector customers across Ontario. Develops secure digital transformation strategies, leads consultative security conversations, manages strategic accounts and sales pipelines, coordinates internal teams and partners, drives cross-sell and up-sell opportunities, forecasts revenue, and exceeds territory sales goals. Requires technology or solution sales experience, cybersecurity knowledge, persuasive presentation skills, and enterprise customer experience.

Supports security incident response and security monitoring by analyzing SIEM alerts, triaging threats, escalating incidents, and providing Tier 2 and Tier 3 support. Develops dashboards and reports, operates web-filtering platforms, maintains secure and available systems, recommends security solutions, supports technology deployments, documents procedures, and promotes security awareness. The role requires SOC or incident-response experience, desktop environment knowledge, ticketing tools, technical writing, and Canadian work eligibility.

Designs, operates, and enhances enterprise cryptographic security platforms, including Venafi, ISG Crypto Vulnerability Scanner, and HashiCorp Vault. Builds automation and integrations, implements risk-driven controls, supports cloud and container security, and participates in incident response and 24/7 on-call rotations. The role leads security initiatives, audits, technology evaluations, project transitions, documentation, and collaboration with infrastructure, application, operations, vendors, and security teams.

Design, build, and operate enterprise identity and endpoint security systems. Implement lifecycle automation, SSO/SCIM provisioning, phishing-resistant MFA, conditional access, endpoint hardening and EDR operations. Build automation and AI agents to reduce manual work, run the enterprise security program, monitor metrics, and partner on telemetry and incident response.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.

Conduct product security reviews, threat modeling, penetration testing, manual code reviews, and architectural assessments. Identify vulnerabilities, lead security incidents, guide engineering teams, build security automation, assess AI and LLM security, mentor junior engineers, and communicate findings through documentation, research, presentations, and publications.

Monitors and triages physical security threats, incidents, alarms, and access-control events for TD Bank. Produces detailed incident reports, conducts open-source research, develops intelligence products, coordinates security guards, and liaises with emergency services and law enforcement. The role supports security policies, procedures, controls, technology projects, process improvements, and timely escalation decisions within a 24/7 rotating shift operation.

Lead cloud security engagements for financial services in Canada, supporting pre- and post-sales, questionnaires, incident investigations, threat analysis, and AI/GenAI risk discussions. Drive customer meetings, presentations, cross-functional remediation, design improvements, and contribute to security messaging, contract negotiations, and industry standards participation.

Collects, validates, and prepares cybersecurity risk data; builds and automates operational and executive dashboards; maps metrics to risk frameworks; maintains reporting schedules and documentation; and communicates insights to technical teams and leadership. The role requires stakeholder interviewing, data visualization, dashboard maintenance, cybersecurity knowledge, and familiarity with NIST, ISO, or COBIT frameworks.

Lead detection and incident response across corporate security systems. Own investigations end-to-end, tune and automate detection (DLP, EDR, SIEM, phishing), produce runbooks and remediations, coach junior analysts, and partner cross-functionally to improve controls, compliance evidence, and AI-related security tooling.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Leads technical security sales engagements as a trusted customer advisor. Responsibilities include designing and demonstrating Microsoft security solutions, developing security modernization strategies, leading architecture sessions, resolving technical blockers, achieving technical wins, coordinating internal teams and partners, and transitioning customers to post-sale success. The role requires expertise in cloud security, XDR, Zero Trust, SIEM, incident response, and Microsoft Defender and Sentinel technologies, along with fluency in English and French.

Leads TD’s enterprise physical security risk management program as an independent second-line-of-defence function. Establishes governance, risk appetite, assessment methodologies, oversight plans, metrics, and escalation practices. Provides effective challenge over physical security controls, incidents, exceptions, investments, and remediation while advising executives and Board committees. Partners across operational risk, resilience, technology, real estate, HR, legal, and other functions, supports regulatory interactions, and leads a high-performing team.

Manage and execute technology audits covering infrastructure, systems, cloud services, information security, operational resilience, access, and data controls. Assess technology risks, control design and effectiveness, regulatory requirements, and emerging risks. Contribute to audit planning, review contracts for audit rights, communicate findings to senior management, and produce high-quality audit documentation and reports.

Provides physical security throughout the casino, hotel, and parking areas by protecting assets, controlling access, monitoring patrons and restricted areas, responding to emergencies, assisting guests, documenting incidents, and maintaining a safe, courteous environment. The role requires compliance with gaming and liquor regulations, participation in use-of-force training, and current First Aid and CPR certification.

Operate corporate security tools and processes, including monitoring DLP alerts, reviewing EDR detections, triaging incidents, conducting investigations, and running phishing simulations. Maintain runbooks, support SOC 2 and ISO 27001 evidence collection, improve security tooling, and develop automation for remediation and unauthorized data-movement detection. The role collaborates across IT, application security, compliance, and people teams while supporting Clio’s security culture.

Lead the vulnerability management and external attack surface management program. Map internet-exposed assets, detect exposed services and leaked credentials, optimize scanning and remediation processes, assess vulnerabilities using business context and threat intelligence, manage risk registers and exemptions, coordinate zero-day response, develop security metrics, and advise governance and executive committees. The role also aligns security processes with regulatory frameworks and requires strong expertise in cloud, web, network, infrastructure, and information security.

Leads complex management consulting engagements for major accounts, advising C-suite clients, shaping strategic change agendas, driving business development and profitable growth, negotiating scope and fees, overseeing delivery, managing multidisciplinary teams, and developing thought leadership. The role also emphasizes client relationship management, financial performance, utilization, talent development, innovation, and execution of transformational initiatives across business and technology environments.

Lead the enterprise AI governance and continuous risk management program. Design AI risk assessment frameworks, maintain an AI inventory and risk register, evaluate AI models and third-party SaaS solutions, conduct adversarial security testing, and assess governance maturity. The role requires collaboration with architecture, legal, compliance, privacy, and security teams while translating complex AI and cybersecurity risks into actionable frameworks, dashboards, and executive reporting.

Leads information security governance and technology risk management for a supported domain. Maintains standards, procedures, control libraries, compliance metrics, and audit-ready documentation; coordinates audit and regulatory responses; drives issue remediation; advises stakeholders on risk and controls; and manages enterprise control adoption programs, testing, reporting, and governance routines.

Design and document solution and information architectures for client engagements, drive technical design reviews, support sales and project estimating, ensure quality implementation, conduct code reviews, and create reusable delivery assets focused on automation and cloud-native solutions.

Provides visible security services at respite centers, including monitoring and patrolling, responding to security and emergency calls, maintaining a safe environment, notifying authorities, recording daily activities, and performing emergency response duties. Requires an Ontario Security Guard License, security or law enforcement experience, strong communication and observation skills, de-escalation ability, and the ability to make quick decisions in high-stress situations.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Design, develop, and maintain enterprise authentication capabilities on a Unified Authentication Platform. Integrate IAM platforms (Ping, IBM ISAM), implement Passkeys (FIDO2/WebAuthn), MFA, OAuth2/OIDC/SAML token lifecycle, REST APIs, and directory integrations. Apply secure coding and collaborate with architecture and DevSecOps teams to deliver scalable, secure identity solutions.