Top Cyber Security Jobs in Toronto

Owns product management for managed security services onboarding. Translates product vision into engineering plans, prioritizes cross-team backlogs, defines requirements, facilitates project ceremonies, monitors telemetry and operational metrics, and drives scalable self-service onboarding experiences. Partners with Product, Engineering, Customer Success, Operations, and technical support to improve customer adoption, time to value, and long-term success across Arctic Wolf’s product portfolio.

Protect enterprise users, assets, and locations by investigating threats and malware, implementing DLP and SIEM detections, securing SaaS and endpoints, hardening configurations, driving vulnerability remediation, automating alerts and reporting, participating in on-call incident response, and mentoring junior engineers.

Design, build, and operate enterprise identity and endpoint security systems. Implement lifecycle automation, SSO/SCIM provisioning, phishing-resistant MFA, conditional access, endpoint hardening and EDR operations. Build automation and AI agents to reduce manual work, run the enterprise security program, monitor metrics, and partner on telemetry and incident response.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.

Lead cloud security engagements for financial services in Canada, supporting pre- and post-sales, questionnaires, incident investigations, threat analysis, and AI/GenAI risk discussions. Drive customer meetings, presentations, cross-functional remediation, design improvements, and contribute to security messaging, contract negotiations, and industry standards participation.

Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.

Provides physical security throughout the casino, hotel, and parking areas by protecting assets, controlling access, monitoring patrons and restricted areas, responding to emergencies, assisting guests, documenting incidents, and maintaining a safe, courteous environment. The role requires compliance with gaming and liquor regulations, participation in use-of-force training, and current First Aid and CPR certification.

Designs and implements security solutions across application, infrastructure, enterprise, and observability domains. Responsibilities include threat modeling, integrating security into development workflows, automating detection and response using AI, incident response, regulatory support, mentoring, and shaping security priorities. The role requires collaboration with engineering, product, compliance, and vendors in a regulated fintech environment.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Operate corporate security tools and processes, including monitoring DLP alerts, reviewing EDR detections, triaging incidents, conducting investigations, and running phishing simulations. Maintain runbooks, support SOC 2 and ISO 27001 evidence collection, improve security tooling, and develop automation for remediation and unauthorized data-movement detection. The role collaborates across IT, application security, compliance, and people teams while supporting Clio’s security culture.

Supports information security compliance programs, regulatory and framework assessments, risk mitigation, audit preparation, remediation tracking, policy maintenance, and security program improvements. The role coordinates evidence collection, manages risk exceptions and registers, monitors international regulations, supports penetration testing reviews, and maintains incident response and business continuity documentation. It also partners with Legal, auditors, stakeholders, and security leads to strengthen the organization’s security posture and compliance roadmap.

Build and maintain security automation, vulnerability management tooling, detection rules, CI/CD integrations, and supply chain security controls. Support application, cloud, identity, access, DLP, secrets, and data warehouse security programs. Partner with engineering teams on secure architecture and remediation, manage security policies, conduct access reviews, and contribute to security standards and mentorship.

Design and document solution and information architectures for client engagements, drive technical design reviews, support sales and project estimating, ensure quality implementation, conduct code reviews, and create reusable delivery assets focused on automation and cloud-native solutions.

Provides visible security services at respite centers, including monitoring and patrolling, responding to security and emergency calls, maintaining a safe environment, notifying authorities, recording daily activities, and performing emergency response duties. Requires an Ontario Security Guard License, security or law enforcement experience, strong communication and observation skills, de-escalation ability, and the ability to make quick decisions in high-stress situations.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Leads global and site security programs across facilities, offices, and laboratories. Responsibilities include security operations, risk and vulnerability assessments, crisis response, investigations, threat awareness training, vendor and contract coordination, governance, technology roadmaps, reporting, and continuous improvement. The role manages security budgets, supports law-enforcement relationships, advises executive leadership, and maintains 24/7 readiness for security incidents and emergencies.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Own application-layer risk identification and remediation across consumer products and APIs. Build and operate AppSec tooling, Harden auth/authorization and GraphQL security, run HackerOne and offensive testing, lead threat modeling and security reviews, and build AI agents to automate triage and remediation while embedding secure-by-default practices into engineering workflows.

Design, operate, and improve cloud security for a multi-account AWS environment and Kubernetes clusters. Build detection, prevention, and automated remediation workflows, drive zero-trust access, shift-left security in pipelines, integrate cloud security tooling, mentor engineers, and partner with infrastructure teams on identity, networking, and secrets management.

Manage an assigned territory supporting SLED: generate pipeline from prospecting to close, provide presales support, align with channel and reseller partners, track opportunities in Salesforce, run demos via online tools, forecast revenue, meet quotas, and report on opportunities to grow company revenue.

Develop and maintain complex software components for a data security project. Responsibilities include analyzing requirements, designing and coding solutions, testing, debugging, reviewing code and designs, supporting production, resolving application issues, and guiding development activities to ensure quality and timely delivery.

Defend organizational digital assets, infrastructure, and data by managing identity lifecycles, enforcing Zero Trust, securing Microsoft 365 environments, deploying patches, implementing data loss prevention, and coordinating incident response. The role also develops security policies, conducts risk assessments, supports regulatory compliance, and monitors emerging cyber threats and defensive technologies.

Build and improve security across applications, cloud infrastructure, internal systems, and products. Responsibilities include identifying and remediating risks, developing security tooling and automation, conducting architecture reviews and threat modeling, integrating security into the software development lifecycle, strengthening identity and access controls, and developing monitoring, vulnerability management, detection, and incident response capabilities.

Drive strategy, discovery, requirements, prioritization, and roadmaps for payment messaging products. Lead complex multinational implementations modernizing banking and acquiring systems. Design configurable, developer-friendly interfaces for interpreting ISO 8583, ISO 20022, and related protocols. Partner with banks, processors, customers, engineering, implementation, executives, and go-to-market teams while integrating with existing platforms and legacy technologies.