Top Cyber Security Jobs in Toronto

Own the Canada region and build an enterprise and mid-market pipeline for Zafran’s cybersecurity platform. Manage consultative sales from prospecting through closing, engage CISOs and security leaders, deliver outcome-based demonstrations with Solutions Engineers, collaborate with channel partners, forecast revenue, and maintain a predictable pipeline. The role requires strategic account sales experience, complex deal management, cybersecurity expertise, executive relationships, and a record of exceeding quota.

Lead global SCA and SAST strategy and tooling, integrate static and open-source scanning into CI/CD pipelines, reduce false positives, perform threat modeling and architecture reviews, mentor teams, and drive developer-first application security across diverse tech stacks.

Supports modernization of technology and cybersecurity governance, risk, and control capabilities. Defines and improves GRC processes, assessment methodologies, evidence management, issue management, automated testing, and platform integrations. Translates stakeholder needs into requirements, user stories, process designs, and implementation guidance. Provides risk analysis, reporting, metrics, and key risk indicators while identifying automation and AI opportunities. Collaborates with business, technology, compliance, audit, and product stakeholders to improve risk-informed decision-making.

Lead execution on ambiguous, high-stakes technical problems across real-time AI workflows, reliability, AI infrastructure, healthcare integrations, and security. Make architectural decisions, de-risk strategic projects, drive initiatives to completion, establish engineering standards, apply product judgment, and improve team effectiveness through strong technical leadership and mentorship.

Investigate phishing, social engineering, malware, impersonation, and brand-abuse threats targeting the bank and its customers. Execute phishing defense operations, identify impacted users and systems, coordinate containment with security and business teams, analyze indicators of compromise, improve detection logic and response playbooks, produce threat metrics, and support information security initiatives and process automation.

Manages corporate physical security governance, standards, controls, risk assessments, vendor services, security reviews, incident investigations, and compliance across multiple Aviva locations. Leads security improvements, reporting, technology roadmap initiatives, travel security, executive protection, and stakeholder engagement. Participates in an on-call duty rotation and supports regulatory compliance, business continuity, and protection against terrorism and malicious intrusion.

Develops secure .NET applications and tools for the Application Security Team. Responsibilities include vulnerability remediation, security guidance, automated scanning, static analysis, incident response, threat modeling, security education, and partnering with development teams to improve application security and organizational security awareness.

Manages Spark Power’s hybrid infrastructure and operational cybersecurity program across Azure, Microsoft 365, networking, identity, endpoints, SOC operations, incident response, disaster recovery, vendors, and technical projects. The role serves as a senior hands-on escalation point, leads infrastructure and security improvements, oversees managed service providers, administers security controls, manages incidents and changes, and communicates technical risks and recommendations to business leaders.

Lead cloud security architecture across AWS and GCP, strengthening identity, access management, workload protection, encryption, secrets management, and secure deployment paths. Build Terraform and policy-as-code guardrails, improve cloud threat visibility and detection, support threat hunting and incident response, and drive strategic security initiatives across engineering teams. Provide technical leadership, mentorship, and guidance while delivering measurable security improvements at scale.

Provides cybersecurity risk management and consulting for business and IT teams. Responsibilities include application risk assessments, secure architecture guidance, cloud security oversight, identity and access management, risk remediation, security policy compliance, and secure-by-design adoption. The role advises stakeholders on complex security issues, supports governance initiatives, and translates technical security requirements into practical business solutions.

Conduct product security reviews, threat modeling, penetration testing, manual code reviews, and architectural assessments. Identify vulnerabilities, lead security incidents, guide engineering teams, build security automation, assess AI and LLM security, mentor junior engineers, and communicate findings through documentation, research, presentations, and publications.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001, SOC 2), support audit execution and evidence collection, manage policy lifecycle, track remediation and internal audits, and partner with cross-functional teams to translate compliance requirements into practical controls and processes.

Build and operate platform security services for Auth0 using Python, Node.js, or Golang. Develop security automation, secure Kubernetes and containerized workloads, implement runtime security and network controls, remediate dependency vulnerabilities, and maintain high-quality production code. The role also involves technical design, code reviews, CI/CD architecture, cloud-native security, and collaboration with engineering teams on vulnerability remediation.

Manage and scale secure logging infrastructure, including OpenSearch clusters, ingestion pipelines, parsing, normalization, access controls, maintenance, and troubleshooting. Automate operational tasks, implement infrastructure as code, support SIEM development, and help design the next-generation logging platform. The role requires AWS, Linux, scripting, infrastructure automation, and security operations experience, with opportunities to work across teams on high-volume, tamper-resistant security data systems.

Leads Docebo’s global information security strategy across product, cloud, GRC, privacy, AI, and incident response. Partners with Product and Engineering on secure SDLC, threat modeling, identity controls, vulnerability remediation, and cloud security. Oversees SOC 2 and ISO 27001 compliance, security operations, customer trust, AI security governance, and executive reporting while building and coaching a high-performing security team.

Hands-on Accountant responsible for month-end close, reconciliations, prepaid and accrual schedules, leases, intercompany entries, consolidated reporting, treasury, lender reporting, payroll support, vendor reconciliation, audit schedules, tax compliance, and SR&ED support. The role supports a multi-entity, multi-currency organization and requires strong Excel, ERP, IFRS, ASPE, Canadian and US payroll, and deadline-management skills.

Serves as the primary security services contact for customers, guiding the integration and effective use of Akamai web security products. Collaborates with cross-functional and sales teams to understand customer needs, tune solutions, implement security and web technologies, and improve delivery methodologies. Requires expertise in internet protocols, CDN operation, web development, IT systems, security practices, consultative customer engagement, and project management. Must be able to obtain and maintain Canadian government clearance.

Lead technical discovery, customized demonstrations, and proofs of value for enterprise CTEM customers. Map vulnerability, asset, ticketing, and remediation workflows; integrate customer tools; prove exposure-management outcomes using customer data; and communicate findings to engineers, CISOs, and executives. Maintain presales deal information, provide product feedback, create reusable demo and POV assets, and expand expertise into third-party risk management and cyber risk quantification.

Leads company-wide security architecture and roadmap, identifies systemic risks, and prioritizes remediation. Oversees security across wallet and key management, trading systems, identity and access, software development, and infrastructure. Builds risk assessment, threat detection, and incident response capabilities while advising the CTO on emerging threats, security priorities, and investments.

Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.

Leads Jhpiego’s global security strategy, policies, risk mitigation, crisis and incident response, travel security, business continuity, investigations, training, and physical asset protection. Manages security vendors, intelligence networks, emergency response plans, executive travel safety, and global security personnel. Provides mentorship, cross-cultural leadership, and technical guidance across international programs, particularly in conflict-affected regions.

Provides end-to-end security consultancy, customer integration, and technical support for Akamai solutions. Serves as the primary customer contact, leads integrated account teams, improves service delivery, identifies risks and enhancements, and communicates with customers, partners, and internal teams. Requires strong knowledge of network or web security technologies, customer-facing IT experience, technical project delivery skills, and the ability to manage multiple priorities.

Drive Platform Cloud sales across Canada's Growth Business segment, focusing on data security, governance, compliance, and ALM solutions. Partner with core account executives, generate leads, manage full sales cycles, develop territory plans, exceed quotas, educate internal teams, collaborate with partners, negotiate deals, and serve as a trusted customer advisor.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Designs, operates, and enhances enterprise cryptographic security platforms, including Venafi, ISG Crypto Vulnerability Scanner, and HashiCorp Vault. Builds automation and integrations, implements risk-driven controls, supports cloud and container security, and participates in incident response and 24/7 on-call rotations. The role leads security initiatives, audits, technology evaluations, project transitions, documentation, and collaboration with infrastructure, application, operations, vendors, and security teams.