Top Cyber Security Jobs in Toronto

Perform proactive threat hunting and attack-surface reduction using MITRE ATT&CK-aligned TTP analysis, SIEM/EDR/cloud tooling. Develop detections, dashboards, playbooks, and mitigation recommendations while collaborating with SOC, IR, intelligence, and engineering teams.

Lead and operationalize information security across systems, applications, and cloud. Manage SOC 2 and ISO 27001 audit cycles, vendor security assessments, incident response, security controls design, and compliance with privacy/regulatory requirements while partnering with technical and business stakeholders.

Manage and support security platforms (CrowdStrike, Netskope, Semperis), implement new controls, run proofs-of-concept, deploy and operationalize security technologies, participate in 24x7 on-call incident response, document playbooks/policies, and transition projects to BAU while improving platform processes.

Coordinate and improve the bank's first-line crisis management capability: maintain playbooks and contact lists, run preparedness exercises, support incident response and escalation, prepare situational briefings, track actions and post-incident lessons, and collaborate with risk, cyber, technology, communications, legal, and operations to ensure timely, governed crisis readiness and recovery.

Lead product security reviews, perform manual code and penetration testing, threat model and assess AI/LLM-integrated architectures, drive incident response and remediation, build security automation tools, mentor engineers, and publish security research.

Lead and scale Phylo's security, privacy, and compliance program: own the compliance roadmap, prepare for SOC 2/ISO 27001/GDPR/HIPAA readiness, support FedRAMP and NIST planning, partner with engineering to implement controls, run risk assessments and audits, manage customer security reviews and RFPs, and automate evidence collection and compliance workflows.

Lead go-to-market strategy and technical product marketing for Oktas access and security portfolio. Develop AI-forward thought leadership, technical demos, reference architectures, and field enablement to drive enterprise adoption. Partner cross-functionally to launch offers, equip sales with ROI/talk tracks, and accelerate strategic deals.

Lead and execute red team operations and adversarial simulations across applications, infrastructure, networks, offices, and processes. Perform threat modeling, vulnerability research, exploit development, and tooling automation. Collaborate with detection/response and engineering to evaluate defenses, document findings, recommend remediations, and mentor teammates while contributing to internal and external security knowledge.

Lead physical security consulting engagements including threat and risk assessments, security master plans, hostile vehicle mitigation, zoning and operational requirements; coordinate multidisciplinary teams through design and implementation; prepare security reports and specifications; mentor junior staff; support proposals, business development, and client workshops for complex government, infrastructure, and commercial projects.

Co-op engineering intern supporting design and documentation of telecommunications and electronic security systems. Assist drafting in AutoCAD/Revit, perform site investigations and data collection, and help prepare technical reports, specifications, drawings, and other project deliverables.

Lead and operate the CSIRT function to coordinate enterprise cyber incident response, technical investigations, forensics, containment, recovery, and post-incident improvements. Partner with detection, threat intel, platform, legal, privacy, and business stakeholders to convert incidents into detections, playbooks, and automation. Establish CSIRT metrics, governance, and capability roadmap while coaching and developing a high-performing incident response team.

Lead product initiatives for ecobee's Smart Security portfolio, owning device+service experiences that drive onboarding, engagement, subscription growth, and retention. Partner cross-functionally to define requirements, run discovery, measure outcomes, and support go-to-market for integrated hardware and digital features.

Lead strategic network and security infrastructure programs: develop capability roadmaps, define security standards, prioritize initiatives, align stakeholders, deliver capability frameworks and communications, and drive technical decisions to improve enterprise cyber posture.

Lead and mature the company's information security program for a distributed workforce. Develop security strategy, governance, risk assessments, incident response, vendor risk management, compliance (SOC 2/ISO/NIST), device and identity controls, security awareness, and executive reporting to reduce cyber risk and enable business growth.

Design and build secure, scalable developer-facing security products and automation. Architect services, APIs, and SPAs; implement CI/CD with security gates; integrate SAST/DAST and cloud security tools; build analytics and AI-assisted vulnerability triage; drive adoption via demos and workshops.

Lead security engineering strategy and technical roadmaps, advise on complex security decisions, drive cross-team collaboration, mentor security specialists, and evolve security controls by monitoring threats and industry trends to ensure secure-by-design delivery at scale.

Perform global offensive security testing and red-team operations to identify and exploit vulnerabilities, evaluate security controls and incident response, produce actionable findings and metrics, and work with regional teams to drive remediation and improve enterprise security posture.

Lead structured threat modelling for applications and architectures (STRIDE, MITRE ATT&CK, attack trees). Identify assets, attack paths, and risks; translate findings into security requirements and controls; run workshops; support secure code reviews, incident response, and integration of threat modelling into SDLC. Contribute to tooling, methods, and AI-agent threat modelling (Maestro). Communicate risks to technical and non-technical stakeholders.

Responsible for securing and ensuring compliance of Oracle Fusion finance applications. Configure and maintain finance user security profiles, manage segregation of duties, support auditors, execute and document security-related testing (unit/SIT/UAT), reproduce and track security incidents, maintain SOPs/knowledge base, and collaborate with stakeholders during financial transformation projects to implement security controls in Oracle Cloud environments.

Lead security and compliance for Oracle Fusion finance applications and OCI. Design and maintain IAM, SSO/MFA, SailPoint/SCIM integrations, Cloud Guard and SIEM configurations; support finance transformation projects, risk mitigation, auditing, and stakeholder collaboration.

Lead and perform vulnerability assessments, internet and wireless penetration tests, social engineering, mobile and embedded testing, and architecture reviews. Produce remediation recommendations, clear reports for senior management, and supervise engagement teams to improve client security posture.

Perform manual penetration tests and security assessments (SAST/DAST) on web applications, networks, and cloud environments; develop remediation recommendations and security guidance; communicate findings to clients and senior management; promote secure development and cloud security best practices; supervise staff and manage engagements.

Lead and perform vulnerability assessments and penetration tests (internet, network, wireless, mobile, embedded, social engineering), identify and document findings, recommend remediations, present results to senior management, and supervise engagement staff while following security testing frameworks and legal/logistical testing processes.

Lead CPCSC compliance for projects from discovery through certification readiness. Engage project teams and stakeholders to identify gaps, gather requirements, implement controls, collect audit evidence, and develop compliance documentation. Drive continuous improvement, coordinate assessments, and support adoption of scalable security solutions in operational project environments.

Lead and manage cross-functional cybersecurity programs across OCISO, define KPIs, prioritize and deliver technical solutions, ensure compliance with security frameworks (ISO, PCI, FedRAMP, NIST), mitigate risks, and present technical issues and resolutions to leadership while collaborating with engineering, product, and business stakeholders.