Top Cyber Security Jobs in Toronto

Leads security architecture and secure development lifecycle activities for Arm IP and SoC products. Defines Root of Trust, secure boot, key management, confidential computing, cryptographic, authentication, and encryption solutions. Owns threat modeling, security requirements, documentation, verification and validation plans, certification readiness, and SDL governance from architecture through post-silicon delivery. Coordinates audits, penetration testing, issue resolution, and security sign-off while mentoring global engineering teams.

Develop and govern enterprise security architecture, roadmaps, policies, standards, reference architectures, and secure solution designs. Lead threat modeling, risk assessment, compliance, and resilience initiatives aligned with ISO, NIST, financial regulations, and cyber threats. Collaborate with business leaders, technical teams, vendors, and payment ecosystem stakeholders; facilitate working groups; present architectural recommendations; mentor security professionals; and mature the organization’s security architecture function.

Develops and maintains enterprise AI security strategy, architecture, governance, standards, and roadmaps. Designs secure patterns for AI applications, models, data pipelines, infrastructure, APIs, LLMs, RAG solutions, and AI agents. Assesses AI-specific threats, supports architecture reviews and vendor evaluations, and partners with technology, risk, legal, compliance, and security teams. Provides guidance on identity, access controls, encryption, monitoring, incident response, responsible AI, and regulatory compliance while educating teams on secure AI practices.

Leads enterprise information security architecture, governance, risk management, policy development, access control, security operations, audits, incident investigations, vulnerability assessments, penetration testing, and business continuity planning. The role develops security roadmaps, coordinates threat and privacy assessments, ensures compliance with applicable standards and laws, and provides security education and consulting across business units.

Owns Opendoor’s enterprise identity control plane, including workforce authentication, passwordless access, session policies, non-human and AI-agent identities, lifecycle automation, access governance, and identity-as-code. Builds Okta integrations and first-party tooling, enforces secure defaults across SaaS and AI tools, supplies identity telemetry to detection systems, supports incident response, and mentors security and IT engineers.

Design, develop, test, and maintain security automation solutions using Splunk SOAR, Python, Ansible, APIs, and YAML. Lead technical design, integrations, troubleshooting, incident escalation, lifecycle management, and production support. Mentor engineers, establish development standards, improve automation maturity, and translate security requirements into scalable solutions. Participate in 24/7 on-call support, major incident response, root-cause analysis, documentation, and operational transition activities.

Conducts end-to-end third-party cybersecurity risk assessments, reviews security evidence and assurance reports, evaluates control effectiveness, identifies deficiencies, documents audit-ready conclusions, and manages remediation activities. The role requires expertise across IAM, vulnerability management, security operations, incident response, data protection, cloud security, and resilience, while coordinating with vendors, technology teams, security specialists, and risk stakeholders.

Own Rootly’s internal enterprise security program, including identity and access management, Google Workspace security, Zero Trust access, endpoint and data protection, SIEM deployment, corporate detection and response, vendor security reviews, AI tool governance, SOC 2 evidence, and customer security questionnaires. The role partners with AppSec and infrastructure teams and participates in corporate security incident on-call rotations.

Design and build AI security tools, conduct penetration testing and red teaming, assess AI applications and third-party technologies, and establish secure development standards. Integrate automated security testing into CI/CD pipelines, evaluate risks such as prompt injection and data leakage, troubleshoot production systems, and collaborate with engineering, security, customers, vendors, and business stakeholders.

Own and mature the company’s cybersecurity and compliance program across IT and OT environments. Responsibilities include SIEM and endpoint security, identity and access controls, vulnerability management, Fortinet network security, backup and disaster recovery verification, ERP/MES security, incident response, audit coordination, control testing, security awareness, vendor reviews, and secure AI and automation deployment.

Designs and operates secure cloud infrastructure, infrastructure-as-code, CI/CD pipelines, identity controls, monitoring, vulnerability management, backup, disaster recovery, and production-readiness processes. The role embeds security testing and audit evidence into delivery workflows while supporting regulated workloads, incident response, release cutovers, and root-cause analysis. It partners with engineering, architecture, privacy, risk, audit, and enterprise security teams to ensure secure, resilient, and compliant platform operations.

Leads enterprise-wide AI governance, security, and continuous risk management. Designs AI risk assessment frameworks, maintains AI inventories and risk registers, evaluates AI models and third-party SaaS solutions, conducts adversarial security testing, and tracks governance maturity. Partners with architecture, legal, compliance, privacy, and technology teams to address AI-specific vulnerabilities, data exposure, bias, confidentiality, and regulatory risks.

Designs and implements secure architectures across applications, infrastructure, cloud environments, and operations. Conducts threat modeling, risk assessments, architecture reviews, and vendor security reviews; develops security standards and controls as code; supports incident response, monitoring, and compliance with NIST, ISO 27001, SOC 2, and GDPR. Partners with engineering, product, IT, DevOps, and compliance teams while mentoring technical staff and promoting secure development practices.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build Neuromorphic Labs’ enterprise go-to-market engine from the ground up. Identify strategic customers and design partners, generate pipeline, lead complex sales cycles, convert pilots into commercial deployments, and close early enterprise accounts. Shape positioning, messaging, pricing, customer narratives, and product priorities based on market feedback. Establish scalable GTM processes, tools, metrics, and operating rhythms while partnering closely with the founder and technical teams.

Lead the definition, design, prototyping, and launch of a production AI trust platform MVP. Translate complex technical concepts into requirements, workflows, interfaces, prototypes, and execution plans. Drive ambiguous initiatives from concept through launch, collaborate deeply with engineering and architects, engage customers and design partners, and support demos, presentations, marketing content, and early adoption.

Leads enterprise security architecture and cybersecurity solution sales, focusing on Microsoft technologies. Partners with sales and executive teams to qualify opportunities, develop differentiated security offerings, guide strategic sales through closure, and architect solutions. Builds pipelines, creates strategy plans and best practices, researches industry trends, facilitates workshops, presents to stakeholders, and serves as a cybersecurity subject matter expert.

Develop and operate application-security automation for vulnerability ingestion, triage, prioritization, and remediation. Integrate CVE, SAST, secret-scanning, penetration-testing, bug-bounty, and IaC findings into unified pipelines. Build AI-assisted security workflows, automated fix processes, data services, dashboards, and scorecards. Partner with engineering teams on vulnerability remediation, root-cause analysis, secure development, and security awareness. Assist with incident response and continuously improve vulnerability management processes.

Design and verify hardware security IP and embedded processor subsystems for SoCs. Develop test plans, UVM/SystemVerilog/Verilog and C testbenches, verification models, and test strategies. Debug failures, ensure functional coverage, and support power and performance optimization. Work with design and project management teams, improve verification methodologies, and mentor engineers. Focus areas include cryptography, key management, secure boot, hardware roots of trust, ARM architectures, multi-clock and multi-power domains, and firmware/hardware co-verification.

Monitor, triage, investigate, and respond to enterprise security incidents across endpoint, network, identity, cloud, and application environments. Analyze SIEM and EDR/XDR telemetry, identify attack patterns and indicators of compromise, execute containment and eradication, improve detection rules and response playbooks, document investigations, support vulnerability remediation, and collaborate with technical and business stakeholders. Participate in on-call rotations, security exercises, reporting, and continuous improvement.

Build and operate cloud security platforms protecting PagerDuty’s AWS and Kubernetes environments. Harden EKS, Istio, containers, IAM, PKI, and encryption; automate controls with Python, Go, Terraform, and policy-as-code. Shape detections, threat hunting, incident response, and compliance evidence across FedRAMP environments. Partner with engineering, AppSec, and GRC teams, develop AI-assisted security automation, participate in on-call, mentor teammates, and lead security initiatives.

Lead hardware and embedded security across Motive devices, including secure boot, firmware, FOTA, manufacturing, threat modeling, architecture reviews, and lifecycle risk management. Partner with hardware and engineering teams to define security requirements, validate controls, remediate findings, and build secure-by-default components. Address hardware, IoT, cloud, runtime, supply chain, and application security across device lifecycles.

Designs and automates application security solutions, integrates security controls into CI/CD pipelines, manages vulnerabilities, and supports developers with code-level remediation. The role uses Snyk, Veracode, APIs, security automation, and AI capabilities to improve vulnerability analysis and remediation. Responsibilities include collaborating with application teams and security partners, developing security-focused integrations, and simplifying enterprise vulnerability management and developer workflows.

Leads CIBC’s enterprise third-party supplier risk monitoring program, including risk tiering, governance, assessments, remediation, regulatory readiness, and ongoing monitoring. Partners with business units, vendor managers, control groups, and regulatory stakeholders to maintain supplier risk within tolerance. Oversees program maturity across jurisdictions and coaches a high-performing team.

Leads enterprise security architecture strategy and governance across infrastructure, cloud, and applications. Conducts threat modeling, secure design reviews, application security assessments, and risk analyses for critical systems. Defines security policies, controls, reference architectures, and threat maps aligned with NIST, OWASP, and ISO 27001. Provides technical leadership, mentors teams, collaborates with engineering and security operations, evaluates security tooling, and supports secure SDLC, DevSecOps, and third-party solution assurance.