Top Cyber Security Jobs in Toronto

Supports cybersecurity governance through risk assessments, vulnerability remediation, control validation, risk reporting, and policy exception management. Provides backup administration for AML and GRC platforms, including IBM OpenPages, and supports incident reporting, root cause analysis, DLP policy implementation, and regulatory readiness. Collaborates with technology, risk, audit, compliance, vendor management, and business teams to assess risks, improve workflows, track remediation, and communicate technical risks in business terms.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Leads North American physical security initiatives, access management, security audits, investigations, insider trust awareness, and emergency response planning. Manages security personnel, supports business continuity activations, oversees physical controls and access systems, and ensures compliance with corporate policies, client requirements, ISO 27001, privacy legislation, and government protocols. Provides subject matter expertise for facilities, renovations, threat assessments, investigations, and security technology programs.

Processes and maintains personnel security clearances for employees, vendors, and contractors requiring access to Ontario government information, assets, and sites. Tracks renewals and terminations, communicates with applicants and security specialists, maintains secure records, prepares change-of-circumstance reports, supports audit readiness, and escalates compliance issues. Provides administrative support while ensuring adherence to Infrastructure Ontario and BGIS security policies.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

The IT Security Consultant designs, implements, and assesses cybersecurity controls across on-premises and cloud environments. Responsibilities include threat modeling, vulnerability management, incident response, digital forensics, network and cloud security, IAM, DevSecOps, data protection, security testing, and risk reporting. The role collaborates with architecture, GRC, operations, engineering, and business stakeholders to deliver security projects, mitigate risks, improve controls, and strengthen the organization’s cybersecurity posture.

Own cloud security architecture across AWS, Kubernetes, and delivery infrastructure. Lead EKS hardening, network segmentation, identity and secrets controls, container supply-chain security, CI/CD protections, and AI workload security. Translate Wiz findings into enforced controls, guide cross-team architecture decisions, mentor security engineers, contribute to hiring, and participate in on-call operations.

Build and own cloud security controls across AWS, GCP, and Cloudflare, including workload identity, least-privilege IAM, secrets management and rotation, network boundaries, detections, incident response, CI/CD security, and infrastructure-as-code controls. Partner with platform and product engineering teams, assess vendor access, improve security posture, document response procedures, and participate in security on-call. This is a hands-on onsite role requiring production cloud security ownership.

Own the enterprise Dynamic and Runtime Application Security program across DAST, IAST, API, and runtime defenses. Lead API discovery, posture management, CI/CD security automation, and protection for cloud-native and AI/LLM applications. Integrate security signals, prioritize vulnerabilities, advise engineering and product teams, and secure multi-language applications across AWS, Azure, and GCP environments.

Supports identity and access management certification campaigns, access reviews, remediation tracking, exception handling, evidence management, audit readiness, and governance reporting. Partners with application owners, reviewers, IAM teams, audit, and compliance stakeholders to validate access data, monitor campaign progress, improve decision quality, and identify process automation and control improvements.

Own security governance, risk, and compliance integration for acquired companies. Assess target security postures, map controls to Payward and external frameworks, score maturity, define and track remediation milestones, manage enterprise risks, support audits, maintain policies, and coordinate with deal teams, leadership, auditors, and control owners across distributed international teams.

Execute end-to-end information security risk assessments, document findings, maintain risk registers, track KRIs, and produce leadership reporting. Build scalable risk workflows, templates, and procedures while partnering with security, compliance, audit, engineering, and legal teams. Analyze technical risk data, support audit readiness, and identify process automation opportunities within Kraken’s Security Governance, Risk, and Compliance program.

The Senior Security Operations Centre Analyst monitors and investigates cybersecurity threats, leads high-severity incident response and forensic analysis, develops and tunes SIEM/EDR detection rules, and improves SOC tools, playbooks, and processes. The role collaborates with IT and engineering teams, supports containment and recovery, conducts post-incident reviews and exercises, researches advanced threats, and mentors junior analysts. Off-hours incident response support may be required.

Oversee hospital security operations, including team supervision, scheduling, training, access control, surveillance, incident response, audits, emergency preparedness, vendor management, union relations, budgets, maintenance, compliance, and security policies. Maintain records, post orders, equipment, KPIs, and preventative maintenance programs while coordinating with hospital departments, law enforcement, and contractors. Rotating on-call coverage is required.

Develop and improve enterprise Java applications and software delivery processes for a deployment security and reliability team. Responsibilities include dependency modernization, CI/CD and release automation, automated testing, application security scanning, vulnerability remediation, software supply-chain security, containerized Kubernetes deployments, and troubleshooting across code, builds, configuration, and deployments. The engineer will work directly with development teams to remove delivery barriers and create reusable engineering practices.

Configure, integrate, maintain, and optimize cybersecurity tools including firewalls, WAF, endpoint protection, SIEM, and cloud security platforms. Support security operations, investigate alerts, assist with incident containment and remediation, develop detection logic, and lead security technology projects. Maintain documentation, runbooks, integrations, dashboards, and compliance evidence while collaborating with infrastructure, cloud, network, application, SOC, and vendor teams.

Leads product security across Black Duck products by overseeing secure architecture, threat modeling, secure code reviews, security requirements, supply chain security, and secure development lifecycle controls. Builds security enablement and Security Champions programs, coordinates assessments and vulnerability remediation, supports PSIRT and incident response, measures security maturity, advises on regulatory obligations, and mentors engineering teams.

Manage corporate actions, security master records, and security pricing data for fund administration operations. Responsibilities include maintaining Bloomberg Terminal processes, researching corporate action documentation, creating and updating securities, validating pricing backups, documenting market data, resolving terminal issues, and improving workflows. The role requires strong fund operations knowledge, advanced Excel skills, attention to detail, independent prioritization, and collaboration with valuation and investor relations teams.

Supports digital transformation by optimizing Workday HCM and Security solutions, gathering requirements, resolving complex support issues, analyzing HR data, managing system enhancements and releases, and overseeing testing, governance, data migration, and validation. The role partners with HR, IT, business stakeholders, and external vendors to improve HR processes, compliance, data quality, reporting, and employee experience.

Owns TD Insurance’s end-to-end PCI DSS compliance program, including scope validation, control ownership, evidence readiness, assessments, remediation, governance, executive reporting, and continuous compliance. Coordinates internal teams, auditors, Qualified Security Assessors, payment assessors, and third-party providers. Maintains PCI documentation, manages risks and exceptions, drives validated remediation, monitors regulatory changes, and improves automation, control effectiveness, and year-round assessment readiness.

Lead security incident response and investigations across endpoint, cloud, identity, and application environments. Hunt threats, develop and tune detections, make containment decisions, and contribute to threat modeling, risk assessments, vulnerability remediation, security testing, and technical security standards. Coach engineers, document investigations, collaborate with IT, Engineering, Legal, and Compliance, and responsibly use AI tools while protecting sensitive information.

Own technical customer onboarding and deployment from initial scoping through value realization. Configure the platform, integrations, workflows, agents, and automations; write Python scripts and build custom solutions using APIs. Troubleshoot integrations and data flows, investigate issues using logs and telemetry, and communicate evidence-based findings to engineering. Bridge customer and internal teams, provide technical guidance, and use AI tooling to accelerate delivery and automate repetitive implementation tasks.

Designs and builds secure, scalable systems protecting products, infrastructure, and customer data. Responsibilities include authentication and OAuth integrations, authorization platforms, BYOK capabilities, security tooling, cloud security controls, threat modeling, vulnerability remediation, and security testing. The role partners with engineering and product teams, establishes secure development practices, leads complex security projects, and mentors engineers.

Owns enterprise data-services product roadmaps, backlogs, specifications, prioritization, delivery, adoption, and success metrics. Partners with UX, engineering, AI, data, and energy-domain experts to transform advisory workflows and deliver secure, integrated, AI-enabled platform capabilities. Leads discovery, cross-functional delivery, rollout, stakeholder communication, and continuous improvement across global user groups.

Support enterprise cybersecurity monitoring and detection engineering by developing, tuning, and maintaining SIEM detections. Analyze security events and telemetry, improve alert quality, identify detection gaps, support investigations, and enhance monitoring coverage across identity, endpoint, cloud, network, email, and application environments. Collaborate with SOC, incident response, security engineering, and technology teams while documenting detection logic, tuning decisions, data sources, and investigation guidance.