Top Cyber Security Jobs in Toronto

Build and lead an AI-supported Red Teaming capability: design and validate attack scenarios from threat intelligence and TTPs, develop inferencing and automation infrastructure, coordinate with security response and intelligence teams, consult on security and AI tooling, and publish findings to improve enterprise defenses.

Design, implement, and manage ERP application security across JD Edwards and Microsoft Dynamics platforms. Enforce role-based access, segregation of duties, and least-privilege; perform SoD risk analysis and remediation; monitor access logs and security events; support audits and compliance; conduct user access reviews; and collaborate with IT and business teams on secure ERP changes and integrations.

Support and improve Staples Canada9s PCI and cybersecurity compliance programs by coordinating assessments, evidence collection, audits, vendor risk reviews, policy management, mitigation tracking, and GRC tooling maintenance while liaising with cybersecurity, technology, audit, and business stakeholders.

Operate and improve security monitoring and incident response: triage alerts from MSSP and internal tools, investigate and escalate incidents, support vulnerability management and compliance (PCI), coordinate remediation with IT, cloud, and retail teams, and support security projects and reporting.

Lead detection, investigation, and response to security incidents across network, endpoint, cloud, and SaaS environments. Design and operate DLP and data governance controls, embed security into cloud/SaaS projects, improve detection across SIEM/EDR/identity/email telemetry, support audits, and mentor junior analysts.

Lead OT cybersecurity GRC activities including gap analyses, risk assessments, standards/procedures, and training. Mentor junior staff, prepare technical deliverables from engineering documentation, support sales and R&D, and perform FAT/SAT testing in industrial environments.

Lead the product strategy and roadmap for a cloud-native, AI-driven security operations platform that unifies video, access control, and communications. Own full product lifecycle: customer research, requirements, prioritization, and cross-functional delivery with engineering, AI, and UX teams to ship agentic AI features that automate incident response and simplify B2B SOC workflows.

Lead and run the bank's cyber resilience testing program (red team exercises, threat simulations); evaluate and prioritize enterprise cyber controls; maintain standards, procedures and guidelines; monitor control adequacy and performance metrics; provide technical guidance and subject-matter advice; drive cross-functional collaboration and manage team and technical roadmap execution.

Sell and close integrated physical security and video surveillance solutions to mid-large customers in an assigned territory. Build strategic account plans, develop pipeline, collaborate with branch teams and OEMs, deliver statements of work, meet KPIs, and ensure successful installation and ongoing service.

Design, develop, and maintain Python-based automation and full-stack solutions to improve operational efficiency, automate security and infrastructure workflows, integrate with REST APIs, support CI/CD, and enhance SRE and security controls while collaborating with stakeholders.

Support national security operations by providing security reporting and analysis, supervising on-site security staff, managing security projects and systems (access control, intrusion, CCTV), investigating threats/crimes, supporting event risk assessments, audits, fire safety, training and awareness, and contributing to incident metrics and project management.

Hunter-style sales role responsible for outbound prospecting, qualifying leads, and closing new commercial accounts for integrated physical security solutions (CCTV, access control, intrusion detection, monitoring, and guard services). Manage full sales cycle, maintain CRM, meet targets, and develop long-term client relationships while partnering with marketing.

Lead design and operationalization of mainframe security for managed services, validate and translate consulting recommendations into runbooks and controls, support IBM Z security domains (RACF/ACF2/Top Secret), integrate with enterprise IAM and SIEM, define operating models for enrollment, access reviews, DR and exception handling, guide delivery through implementation and transition-to-run, and create reusable security assets and documentation.

Build and maintain internal security tooling, automation, and cloud-native services to improve secure software delivery, secrets and identity management, vulnerability detection, and runtime protection. Partner with Platform, Infrastructure, and Product teams to integrate security into CI/CD, Kubernetes, and AI-enabled workflows and support incident response and remediation.

Lead security architecture and technical direction across encryption/key management, IAM, cloud and application security, and AI/agentic systems. Partner with product and engineering teams to embed secure-by-default designs, mentor security engineers, advise on complex technical escalations, and translate technical risk for leadership and compliance stakeholders.

Lead and develop a team of security solution engineers to win technical decisions, drive deployment and consumption, prioritize high-value opportunities, orchestrate cross-functional resources, scale partner-led motions, and embed technical best practices across cloud, hybrid, and on-premises security architectures.

Lead implementations of Proofpoint Information Protection to meet information protection and compliance objectives. Engage enterprise customers, configure Email/Cloud/Endpoint DLP, conduct DLP and data exfiltration investigations, build playbooks, mentor team members, and document best practices while coordinating cross-functional teams to ensure successful project outcomes.

Design, implement, and improve enterprise security controls across endpoint, email, vulnerability management, proxy/SSE/CASB, cloud posture, SIEM/SOC, application security, PKI, and AI/GenAI security. Lead vulnerability risk management, tune detections, drive remediation with stakeholders, and automate security workflows to strengthen the companys security posture.

Perform secure code reviews and penetration tests across applications and infrastructure, identify vulnerabilities using automated and manual techniques, produce remediation guidance, train and mentor developers, develop tooling and reports, lead release-based testing and mitigation review processes, and participate on-call for change approvals.

Join Auth0 Security Engineering to implement programmatic cloud security guardrails across multi-cloud environments. Responsibilities include building cloud security controls (SCPs, Azure Policy), IAM templates and permission boundaries, VPC and edge networking standards, and systems that validate security posture and surface actionable feedback to engineering teams.

Full‑stack software engineer responsible for end-to-end feature delivery across a Python (Flask/FastAPI) backend and TypeScript/React frontend. Champion AI-augmented development, collaborate cross-functionally, improve performance and reliability, resolve defects, and adapt processes while owning projects from discovery through production support.

Lead and scale application security by embedding automated SAST/DAST/SCA testing into CI/CD, administering GHAS, performing pentests and threat modeling, coordinating vulnerability management, securing cloud-native workloads (AWS), and training engineers on secure coding and incident handling to improve overall security posture.

Lead Aviva Canada's operational resilience, business continuity, crisis management, corporate security, and health & safety programs. Develop strategy, ensure OSFI E-21 compliance, manage incidents and governance, assess third/fourth-party resilience, track KPIs, engage senior stakeholders, and oversee risk, controls, and remediation across the enterprise.

Perform offensive application security work: pentesting, exploit identification, threat modeling, vulnerability remediation guidance, automate scanning and static analysis, support incident response and forensics, research new attack vectors, and drive security education across engineering teams.

Support and manage SIEM (Splunk ES) and security visibility technologies; design and implement security controls; investigate/respond to incidents; participate in 24x7 on-call rotations; run POC/POVs for security tools; collaborate with infrastructure, architecture, and development teams; document playbooks and operationalize projects for BAU while continuously improving security platform processes.