Top Cyber Security Jobs in Toronto

Build and operate platform security services for Auth0 using Python, Node.js, or Golang. Design scalable security data pipelines, resilient microservices, cloud integrations, and platform security controls. Apply secure coding practices, manage service permissions, participate in technical design and code reviews, and maintain high engineering standards across AWS or Azure containerized environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Leads enterprise security, compliance, and IT operations, establishing a unified roadmap and team. Owns security posture, incident readiness, SOC 2, NIST, BSIMM, privacy, vendor reviews, data protection agreements, AI governance, access controls, employee technology, corporate system reliability, budgets, and audit readiness. Partners with engineering, product, sales, people teams, customers, and executive leadership to protect sensitive data and scale secure operations.

Work on practical computer vision and AI problems, including OCR, visual recognition, vision-language models, algorithm optimization, confidence estimation, synthetic data, and self-learning systems. Design experiments, analyze production AI failures, work with real-world datasets, apply research findings, and independently develop and test solutions.

Design and build agent-based and multi-agent AI systems that use tools, plan tasks, evaluate outcomes, learn from feedback, and recover from failures. The intern will develop agent workflows, memory and delegation systems, evaluation frameworks, human-review processes, and long-running autonomous systems while applying current AI research.

Supervise security specialists and provide security services at respite shelters. Responsibilities include monitoring systems, patrolling, responding to emergencies, investigating security and safety incidents, managing access and trespassers, maintaining logs, conducting inspections, and communicating with clients and authorities. The role also performs opening, lockdown, bomb threat search, emergency response, and team leadership duties.

Design and implement end-to-end security architecture for a healthcare AI platform across IAM, infrastructure, application, data, and cyber defense. Build Azure-native security controls, monitoring, alerting, and incident response capabilities; support SOC 2 and HIPAA compliance; embed security into the SDLC; conduct threat modeling, vulnerability assessments, and product security reviews; and collaborate with engineering, ML, infrastructure, executives, and healthcare customers.

Conduct red team operations, adversary simulations, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services. Identify attack paths involving IAM, secrets, metadata, automation, and configuration weaknesses. Validate detection and response capabilities with blue teams, track emerging attacker techniques, and drive remediation through concise reporting and stakeholder communication.

Designs enterprise cybersecurity architectures, reference patterns, strategies, and roadmaps spanning identity, endpoints, vulnerability management, security operations, analytics, automation, and emerging AI capabilities. Evaluates technology integration, interoperability, risks, and future-state designs; establishes guardrails for secure AI adoption; and collaborates with architects, engineers, operations teams, vendors, and executives to translate emerging technologies into practical cybersecurity solutions.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Senior HR Business Partner supporting technical and business teams through organizational design, manager coaching, employee relations, performance and talent management, compensation, workforce planning, organizational change, and people program execution. The role uses workforce insights to advise leaders, manage employee matters, improve organizational effectiveness, and support healthy growth across a scaling technology company.

Leads security engineering strategy and remains hands-on designing, coding, and scaling enterprise security capabilities. Builds automation, platforms, APIs, and reusable frameworks; guides cloud, infrastructure, identity, application, endpoint, and AI security. Establishes architectures, standards, and guardrails, influences executives and engineering teams, evaluates technology risks, mentors senior technical staff, and advances secure adoption of emerging technologies across cloud-native and SaaS environments.

Lead and build the company’s information security program while initially owning IT operations. Responsibilities include protecting source code and hardware designs, securing developer infrastructure and software supply chains, managing identity and access, incident response, NIST 800-171 and CMMC compliance, export-control technical safeguards, AI and data governance, device management, networking, and IT scaling. The role is hands-on and partners closely with engineering, legal, compliance, vendors, and leadership.

Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.

Provides pre-sales technical support and technical account management for Vectra’s AI-driven cybersecurity platform. Responsibilities include customer discovery, product demonstrations, proofs of concept, security architecture guidance, technology reviews, integrations, deployment reviews, and technical relationship development. The role requires expertise in security platforms, networking, cloud security, incident response, attacker progression, and security processes, along with strong communication and large-account management skills. Regional travel is required as needed.

Design and implement security solutions across application, product, infrastructure, enterprise, and observability domains. Conduct threat modeling, embed security into engineering workflows, automate detections and incident response using AI, participate in on-call incident response, and support compliance efforts including SOC 2, ISO 27001, and PCI. Mentor engineers, influence security strategy, and collaborate with internal stakeholders and vendors in a regulated fintech environment.

Supports PCI compliance and cybersecurity risk programs through policy management, risk assessments, control testing, audit evidence collection, remediation tracking, governance reporting, and third-party risk assessments. The role coordinates with cybersecurity, technology, audit, procurement, legal, and business stakeholders while maintaining risk registers, compliance documentation, and GRC processes.

Designs enterprise security architecture, governance, and risk frameworks for AI and machine learning systems. Responsibilities include establishing secure AI and MLOps architectures, mitigating AI-specific threats, implementing governance aligned with NIST and ISO standards, protecting AI data, ensuring privacy compliance, and advising executives. The role also mentors analysts and guides engineering teams on secure, ethical, and compliant AI deployment.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Leads cybersecurity governance, risk management, and compliance programs. Responsibilities include managing GRC teams, assessing IT and vendor risks, coordinating audits, developing security policies, implementing governance frameworks, overseeing GRC platform automation, delivering security awareness training, and advising executives on risk and compliance strategy. Requires extensive IT security or risk management experience, team leadership, and familiarity with security technologies and compliance frameworks.

Lead cloud security direction across AWS, GCP, and self-managed Kubernetes. Define standards, reference architectures, IAM controls, threat-modeling practices, detections, incident-response playbooks, vulnerability-management workflows, and secure infrastructure-as-code and CI/CD practices. Serve as a senior incident responder and cloud-forensics lead, secure distributed systems and data stores, drive cross-functional initiatives, and mentor security and platform engineers as a senior individual contributor.

Lead Appfire’s Platform and Innovation portfolios, defining strategy, roadmaps, platform capabilities, AI services, and 0-to-1 product development. Own the technical relationship with Atlassian, including platform, API, Forge, Marketplace, security, and ecosystem changes. Build and coach product leadership teams, manage investment decisions, drive platform adoption, and oversee commercial outcomes including revenue, customer adoption, and product launches.

Conduct manual penetration testing, secure code reviews, and SAST triage across web applications, APIs, and AWS infrastructure. Develop AI-assisted security tooling, define testing approaches for LLM applications and agentic systems, and review AI-generated software before production. Communicate vulnerabilities, risks, and remediation priorities to engineering teams while improving secure SDLC practices.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.