Top Cyber Security Jobs in Toronto

Senior Software Security Engineer responsible for threat modeling, security architecture reviews, code and penetration testing, integrating SAST/DAST/SCA into CI/CD, triaging vulnerabilities, driving secure SDLC/DevSecOps practices, incident response, and ensuring compliance with industry security standards.

Lead and own the information security program and security engineering at NEAR Foundation. Drive SOC 2 Type 2 and ISO 27001 readiness, run logging/monitoring/incident response, manage vulnerability and third-party risk, harden identity/access/endpoint stacks, automate security and compliance across SaaS, and advise on tooling and cloud security (AWS/GCP).

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Protect company employees, assets and customer freight by investigating theft and security incidents, conducting audits and inspections, implementing preventive security measures and procedures, ensuring cross-border compliance (CTPAT/PIP/AEO), delivering training, and collaborating with operations to reduce losses and maintain security standards across the regional network.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Work with the security team to triage vulnerabilities, operate vulnerability management, audit and refine IAM and access controls, improve CI/CD security checks, tune and automate SIEM alerting and log ingest, support security exercises, research security tools, and document findings.

Customer-facing Cloud Solution Architect specializing in data security on the Microsoft platform. Advise customers on data protection, insider risk, DLP, and Zero Trust; design end-to-end solutions, run architecture sessions, deliver technical presentations/demos, drive adoption and operational health, and collaborate with Microsoft engineering, partners, and stakeholders.

Serve as the customer-facing security lead for Akamai product integrations, drive account team delivery and customer success, identify service improvements, manage technical projects and priorities, and communicate with internal and external stakeholders to ensure high-quality integration and support.

Deliver, integrate, maintain, and optimize Akamai-based web security solutions (CDN, WAF, API Security, Bot Management). Architect customer configurations, analyze web traffic and system architectures, remediate security issues, document technical work, collaborate with cross-functional teams, automate deployments using Terraform/Akamai CLI and scripting, and use tools like Burp Suite, Postman, and cURL for troubleshooting and validation.

Perform non-disruptive OT security assessments (tabletop and targeted testing) across ICS/SCADA environments, identify operationally relevant risk, advise clients on remediation and program improvements, and contribute to Packetlabs' OT methodology and team knowledge.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Design and implement security and privacy features across Tailscale's codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive mitigations to resolution, and spend significant time writing secure software (50%+ coding). Collaborate with engineering teams to promote secure coding and provide guidance and training.

Lead full‑stack development and reliability improvements for the Firefox Add‑ons ecosystem, building features, automated moderation pipelines, reviewer tools, and observability. Improve platform reliability, respond to incidents, and help keep the ecosystem safe and trustworthy. Collaborate across design, product, QA, and community contributors and contribute openly through PRs and code reviews.

Design and run automation-driven, AI-agent-assisted attack campaigns and red-team simulations against Wealthsimple products and infrastructure; build and improve automated testing pipelines, AI agents, and tooling; triage AI-generated findings into high-signal vulnerabilities; collaborate with platform engineers and AppSec to integrate adversarial testing into the SDLC and support remediation.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001, SOC 2), support audit execution and evidence collection, manage policy lifecycle, track remediation and internal audits, and partner with cross-functional teams to translate compliance requirements into practical controls and processes.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Partner with engineering and product teams to design, ship, and integrate scalable security solutions. Lead security reviews, threat modeling, and technical roadmaps, use metrics to drive risk reduction, mentor engineering teams, and leverage LLMs, CI/CD, and AI tooling to improve security at scale.

Perform application security and vulnerability management across web apps, APIs, cloud services and third-party components. Run SAST/DAST/SCA and web scans, coordinate penetration tests, validate and track remediation, and support security operations (EDR/DLP/SIEM/SOAR). Manage security awareness (KnowBe4), assist incident response, tune alerts, and collaborate with engineering, IT, and business stakeholders to reduce risk.

Lead and improve daily operations of Twilios Security Risk program: maintain risk registers and KRIs, perform qualitative and quantitative risk analyses, build dashboards and predictive models, coordinate remediation with engineering, support audits, and drive automation and AI-enabled risk tooling to scale program impact.

Design, implement, and operate security capabilities across endpoint, cloud, identity, and network environments. Build integrations and automation (scripting/APIs), extend vendor platforms, improve interoperability, monitor and optimize security services, and partner with engineering and IT teams to embed secure, scalable controls that reduce risk.

Design and drive security architecture for applications, services, and infrastructure. Partner with engineering and DevOps on secure backend design, cloud and container security, CI/CD hardening, and access controls. Conduct threat modeling, risk assessments, and security reviews; integrate security tooling; enforce secure coding practices; mentor engineers; and stay current on fintech and blockchain threats and compliance standards.

Work on Firefox security architecture and cryptography stack, implement and maintain WebPKI and security-sensitive web APIs, design and ship web platform security features, debug and improve multi-threaded browser performance and memory, collaborate across teams on security initiatives, and contribute to technical design and planning.