Top Cyber Security Jobs in Toronto

Lead multi-year product strategy for non-human identity and security across MongoDB Atlas, core DB engine, and developer platforms. Drive workload identity federation, passwordless/zero-trust access, MCP/AI agent authorization, developer-first access management, partner with engineering, UX, and GTM to prioritize and measure adoption, and represent MongoDB at industry events and customer briefings.

Own application-layer risk identification and remediation across consumer products and APIs. Build and operate AppSec tooling, Harden auth/authorization and GraphQL security, run HackerOne and offensive testing, lead threat modeling and security reviews, and build AI agents to automate triage and remediation while embedding secure-by-default practices into engineering workflows.

Design, operate, and improve cloud security for a multi-account AWS environment and Kubernetes clusters. Build detection, prevention, and automated remediation workflows, drive zero-trust access, shift-left security in pipelines, integrate cloud security tooling, mentor engineers, and partner with infrastructure teams on identity, networking, and secrets management.

Leads the organization-wide third-party risk management program, including vendor security assessments, risk classification, compliance reviews, remediation plans, contractual security requirements, incident response, risk registers, reassessments, and governance reporting. Advises leadership and internal teams on cybersecurity, privacy, operational resilience, and regulatory requirements while negotiating security controls with vendors and partners.

Manage an assigned territory supporting SLED: generate pipeline from prospecting to close, provide presales support, align with channel and reseller partners, track opportunities in Salesforce, run demos via online tools, forecast revenue, meet quotas, and report on opportunities to grow company revenue.

Provide Level 2 and Level 3 support for Identity Management, SafeBreach, and DTEX security platforms. Manage provisioning, deprovisioning, access changes, RBAC, identity governance, monitoring, upgrades, integrations, and incident resolution. Investigate platform and authentication issues, perform root cause analysis, support audit readiness, maintain documentation, and collaborate with security, infrastructure, HR, application owners, and vendors on operational improvements and remediation.

Develop and maintain complex software components for a data security project. Responsibilities include analyzing requirements, designing and coding solutions, testing, debugging, reviewing code and designs, supporting production, resolving application issues, and guiding development activities to ensure quality and timely delivery.

Provides second-line oversight of physical security and operational risks across the organization. The role assesses control effectiveness, monitors governance frameworks, analyzes risk data, manages regulatory reporting, identifies gaps, and recommends mitigation plans. Responsibilities include stakeholder advising, risk issue management, governance meeting leadership, regulatory audit support, change management, database coordination, and maintenance of operational risk tools and templates.

Leads information security and technology risk activities, including control assessments, vulnerability and risk analysis, regulatory compliance, audit support, security governance, incident response, and remediation planning. Advises technology and business stakeholders, develops security policies and frameworks, monitors control effectiveness, produces risk reporting, and serves as a subject matter expert for complex initiatives. Requires strong knowledge of cybersecurity standards, GRC platforms, data analysis, and enterprise collaboration tools.

Manages corporate physical security governance, standards, controls, vendor services, risk assessments, incident investigations, compliance, and security improvements across multiple locations. Leads security reviews, reporting, control testing, preventative maintenance, technology roadmap initiatives, travel security, executive protection, and on-call escalation support. Requires strong stakeholder leadership, risk management, physical security program experience, and proficiency with Microsoft 365 and security platforms.

Design, develop and maintain security automation using Splunk SOAR (Python) and Ansible (YAML). Triage and remediate automation errors, implement security controls, support enterprise deployments, join 24x7 on-call incident response, create documentation, and transition projects to BAU with stakeholder collaboration.

Defend organizational digital assets, infrastructure, and data by managing identity lifecycles, enforcing Zero Trust, securing Microsoft 365 environments, deploying patches, implementing data loss prevention, and coordinating incident response. The role also develops security policies, conducts risk assessments, supports regulatory compliance, and monitors emerging cyber threats and defensive technologies.

Lead architecture and development of secure, high-scale Python and FastAPI payment infrastructure for AI-agent transactions. Design APIs for tokenization, mandates, authentication, attestation, and cryptogram workflows; own security, reliability, observability, testing, Kubernetes provisioning, and production operations. Drive technical initiatives, design reviews, and cross-functional collaboration with product, security, infrastructure, platform, and card-network partners while applying AI-assisted engineering practices.

Drive strategy, discovery, requirements, prioritization, and roadmaps for payment messaging products. Lead complex multinational implementations modernizing banking and acquiring systems. Design configurable, developer-friendly interfaces for interpreting ISO 8583, ISO 20022, and related protocols. Partner with banks, processors, customers, engineering, implementation, executives, and go-to-market teams while integrating with existing platforms and legacy technologies.

Own product strategy and technical integrations for agentic commerce payments. Translate emerging standards into APIs, protocols, trust frameworks, requirements, and roadmaps. Partner with card networks, wallets, AI platforms, and engineering teams to deliver tokenization infrastructure, browser automation tooling, observability, and secure agent-initiated transactions. Represent VGS in standards discussions and shape the company’s technical vision for agent-ready payments.

Lead SAP security architecture, access governance, role design, and compliance controls across ECC, S/4HANA, SAP RISE, BTP, and cloud identity services. Support SAP RISE migration, RBAC, least-privilege enforcement, SoD remediation, privileged access, provisioning, access reviews, and SAP GRC/IAG administration. Partner with business, technical, audit, and implementation teams on SOX and IT General Controls, risk reviews, documentation, and audit readiness. Provide technical direction and mentorship without formal people management.

Build and improve security across applications, cloud infrastructure, internal systems, and products. Responsibilities include identifying and remediating risks, developing security tooling and automation, conducting architecture reviews and threat modeling, integrating security into the software development lifecycle, strengthening identity and access controls, and developing monitoring, vulnerability management, detection, and incident response capabilities.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Supports cybersecurity risk and compliance intake, risk registers, third-party assessments, documentation, metrics, security monitoring, incident response, and periodic control reviews. The intern will help maintain cybersecurity risk management tools, monitor threat trends, recommend security improvements, and coordinate requests with stakeholders. This four-month co-op requires active enrollment in a relevant bachelor's program and availability for 35 hours weekly from January 4 through April 23, 2027.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, automate GRC workflows with Python and agentic coding tools, maintain integrations across ticketing and risk platforms, and develop dashboards and reporting. Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to support risk-informed decisions and mature security governance processes.

Lead Forward Financing’s application and product security program, including pentesting, code review, vulnerability remediation, AI security testing, secure SDLC practices, and external exposure controls. Manage and develop senior security engineers, establish testing standards and remediation SLAs, build security services, and partner with engineering and executives to prioritize risk across web applications, APIs, cloud infrastructure, and AI-built software.

Lead product security initiatives focused on application security, systemic vulnerability remediation, secure architecture, software development lifecycle improvements, GitHub workflows, SCA tooling, and private package repositories. Partner with developers, promote secure development practices, experiment with AI-assisted vulnerability analysis and fixes, represent Product Security cross-functionally, and mentor teammates.

Supports application security across product and engineering teams by reviewing code, configurations, designs, vulnerabilities, and pull requests. Helps triage and prioritize security findings, provides remediation guidance, develops scripts and automation, and promotes secure coding practices. The role communicates risk to technical and non-technical stakeholders, collaborates cross-functionally, and develops offensive, defensive, and software engineering skills.

Develop and lead bold, integrated creative campaigns from concept through launch and measurement. The role spans digital, social, video, OOH, events, partnerships, influencers, PR, and experiential activations. Responsibilities include creating briefs, managing creative partners, defining success metrics, analyzing engagement and pipeline impact, and experimenting with emerging formats and AI-powered workflows. Success requires strong creative judgment, project management, cross-functional collaboration, and a data-driven approach to campaign performance and ROI.