Security Engineer

• Manage security and compliance programs
• Maintain Knak’s security control framework and oversee continuous monitoring and remediation efforts
• Drive security awareness and behavior change
• Educate control owners, deliver training, and promote best practices across the organization
• Collaborate with internal and external partners
• Work closely with product, engineering, leadership, auditors, and vendors to support security workflows
• Maintain and improve security documentation
• Develop and manage policies, standards, procedures, and internal handbooks
• Support Governance, Risk, and Compliance (GRC) activities
• Monitor metrics, contribute to reporting, and provide visibility into security and compliance health

Team Lead, Security & Compliance

• Lead, mentor and develop a team of infrastructure, cybersecurity and IT projects specialists.
• Plan priorities, allocate assignments and ensure effective team capacity management.
• Participate in recruitment, coaching and professional development of team members.
• Foster a collaborative work environment focused on innovation and continuous improvement.
• Define and evolve the organization's technological standards.
• Ensure consistency of architectures deployed for our clients and within our internal environments.
• Oversee cybersecurity and risk management initiatives.
• Develop technology roadmaps and recommend optimal modernization approaches.
• Prioritize and supervise technology projects.
• Ensure timelines, budgets and business objectives are met.
• Collaborate with teams to ensure successful deliveries and client satisfaction.
• Serve as a technical authority in complex situations.
• Identify opportunities for automation, optimization and innovation.
• Contribute to the evolution of the organization’s practices, tools and services.

Infrastructure, Security, IT Projects Manager

• Translate enterprise-level security architecture into actionable, site-level security blueprints aligned with the overall program vision.
• Define and document the target-state architecture for the Network Security domain, including firewall rule consolidation, VRF-based macro-segmentation, and DDoS mitigation strategies.
• Analyze and optimize legacy security policies by consolidating overlapping firewall rules into streamlined, standardized templates.
• Collaborate closely with client Security and CISO teams, supporting design validation, risk alignment, and compliance with regulatory frameworks (e.g., CISA, HIPAA).
• Identify and resolve complex IP subnet overlaps and security-related routing conflicts flagged during data analysis phases.
• Define clear security exit criteria and guardrails as part of the migration factory Definition of Done (DoD).
• Contribute to architecture governance, including participation in architecture reviews, design approvals, and development of enterprise standards and reference architectures, while collaborating with cross-domain architects.

Network Security Architect

• Serve, prospect for, solicit, and develop and maintain business relationships with members and clients
• Sell life and health insurance products and services through multiple distribution channels based on member/client needs and current strategies and practices
• Focus areas include individual insurance, group insurance and retirement savings plans, insurance brokerage, segregated funds, travel insurance and life and health insurance claims settlement
• Promote and sell financial security products and services
• Communicate effectively and thoroughly understand clients' expressed needs
• Analyze member/client needs and develop personalized solutions
• Ensure member/client satisfaction and service quality in accordance with the organization’s standards and procedures
• Support current and potential members and clients
• Tailor your approach as needed and help negotiate agreements with clients
• Establish and maintain good relationships with referral sources
• Monitor the industry to identify business development opportunities and stay on top of new products and trends.

Financial Security Advisor, Life and Health Insurance

• Administer, configure, and support enterprise workload protection platforms (e.g., Wiz, Prisma Cloud Compute) across global Kubernetes environments.
• Design, deploy, and maintain workload protection solutions across Kubernetes platforms including OpenShift, AKS, EKS, and GKE.
• Partner with Kubernetes platform teams to onboard new clusters and ensure consistent deployment, integration, and operation of workload protection capabilities.
• Develop and maintain automation and deployment solutions using GitOps tools and methodologies, including Helm, Argo CD, and FluxCD, while integrating security capabilities into enterprise CI/CD pipelines.
• Manage platform configuration, upgrades, policy deployment, and lifecycle activities to ensure high availability, operational resilience, and security coverage.
• Troubleshoot platform, deployment, networking, and integration issues across Kubernetes and cloud environments, driving continuous improvements in reliability and scalability.
• Develop automation using Python, PowerShell, or similar scripting languages to improve operational efficiency and platform management.
• Collaborate with infrastructure, cloud, DevOps, and application teams, while participating in Agile ceremonies and engaging with technology stakeholders to enhance existing and future technology solutions.
• Communicate regularly with product leads across the technology organization and discuss opportunities for improvement to existing and future technology solutions.

Cybersecurity Platform Specialist – Kubernetes Workload Protection

• Develop and maintain Enterprise Security AI security technology roadmap, standards, and reference architectures
• Establish AI security design principles, guardrails, and governance requirements
• Define security requirements for enterprise AI technologies, platforms, and AI-enabled solutions
• Assess emerging AI technologies and provide security recommendations for enterprise adoption
• Design secure architectures for enterprise AI technologies, platforms, and integrations with business and technology systems
• Lead architecture reviews and security assessments for AI initiatives
• Ensure security-by-design principles are embedded throughout the AI development lifecycle
• Identify and assess AI-specific risks, including prompt injection, data poisoning, model manipulation, unauthorized model access, sensitive data exposure, agent misuse, privilege escalation, and supply chain risks
• Develop compensating controls and mitigation strategies to reduce AI-related security risk
• Support AI threat modeling and secure design reviews
• Collaborate with AI Governance, Legal, Privacy, Risk, and Compliance teams to align AI security requirements with enterprise obligations
• Ensure AI solutions align with applicable security, risk management, regulatory, industry, and internal policy requirements
• Define AI security control requirements and governance processes
• Provide security architecture guidance for AI workloads deployed across cloud, hybrid, and on-premises environments
• Define requirements for identity and access management, data protection, logging and monitoring, model security, secrets management, and infrastructure security
• Support the secure deployment and operation of enterprise AI platforms
• Develop detection and response capabilities for AI-related threats
• Partner with Security Operations, Threat Intelligence, and Incident Response teams to monitor and respond to AI-related risks
• Identify opportunities to use AI to strengthen cybersecurity operations
• Serve as the primary subject matter expert for AI security
• Provide technical leadership and mentorship to architects, engineers, and analysts
• Communicate AI security risks, recommendations, and architectural decisions to senior leadership
• Influence enterprise AI investments and architectural decisions to support secure adoption

AI Security Architect

• Perform assessments and report on cybersecurity compliance across TC Energy
• Conduct internal Cybersecurity audits
• Coordinate Cybersecurity Compliance attestations
• Drive automation of security controls with a focus on continuous monitoring
• Partner with our Strategy and Performance team to develop key metrics and create dashboards that leverage available data sources for leadership review and decision-making
• Collaborate with governance and risk teams to enhance our GRC practices by optimizing processes related to people, procedures, and technology
• Review security tools to identify vulnerabilities or insecure configurations and provide guidance on remediation strategies
• Interpret and translate cybersecurity standards and regulatory requirements into actionable security controls, ensuring their effective implementation within the organization’s technical and procedural frameworks
• Coordinate and organize evidence for regulatory audits by collecting relevant documents, confirming compliance, and ensuring materials are ready for auditor review.
• Coordinate with internal teams to support timely audit responses

Security Compliance Specialist

• This role plays a key role in securing EQB’s Digital Banking and Channel Technology assets.
• It provides proactive input into the design and implementation of security controls within the Digital Banking technology architecture and acts as a primary security advisor to Digital Banking & Channel Technology teams.
• The Associate Principal Architect, Security supports the integration of security by design and secure development practices across customer-facing platforms and back-end infrastructure.
• This role also contributes to the development of security frameworks, collaborates closely with cross-functional teams, and helps ensure that security requirements are embedded early and effectively in the solution lifecycle.

Associate Principal Architect, Security

• Work with business partners and application teams across RBC Enterprise to explain the onboarding process and document requirements.
• Identify and implement solutions to improve the efficiency of the onboarding process.
• Work with business partners and application teams to ensure onboarded applications continue to be compliant.
• Learn architectural patterns relevant to RBC’s IAM services.
• Identify and report security risks in accordance with RBC Standards.
• Participate in all aspects of onboarding testing as requested by the onboarding team: Review, analyze, and define onboarding requirements as well as contribute to the technical development specifications.
• Test case scenario creation and assisting with test case writing.
• Assisting with DEV, SAI (UAT) and PIV testing.

Senior Cyber Security Specialist, IAM Onboarding

• Advise data producers and users on how to improve their understanding and maximize their use of data valorization methods while maintaining sound data governance practices
• Advise and train teams on how to apply data management processes and controls properly
• Develop and maintain data governance logs, tools and dashboards
• Identify the sector’s data governance needs and opportunities
• Help teams analyze risks and potential gaps between what is set out in the governance documents and their operational practices
• Develop and implement practices and mechanisms to ensure compliance with the governance documents that apply to data
• Measure and monitor the performance of the standards and the practices in place, including changes in data governance maturity
• Carry out projects related to the development of data governance

Data Governance Advisor

• Ensure optimal triage of security alerts while supporting the escalation and eradication of cybersecurity incidents within established timelines
• Identify anomalies, investigate advanced cyber events, and provide third-level support for investigations and confirmed incidents as required
• Participate in the cybersecurity incident lifecycle, from preparation through post-mortem
• Ensure optimal coverage by reviewing detection rules, recommending improvements and/or proposing new rules based on the organization’s operating context
• Contribute to the creation, enhancement, review, and maintenance of documentation in line with industry best standards
• Collaborate with various internal teams on projects and initiatives as a subject matter expert (SME) when required
• Respond to user requests related to cybersecurity
• Participate in the 24/7 support rotation in collaboration with other team members

Security Advisor Specialist – Cybersecurity Incident Management

• Provide high level technical expertise to support the network security operations team in all activities.
• Provide high quality internal and external customer service surrounding the company values.
• Implement and support of Network Security components (NGFW, DDoS) LAN, WAN, Data Center infrastructure, ZTNA etc.
• Ensures all network infrastructure engineering patterns are appropriately designed to meet our SLA requirements.
• Responsible for writing and reviewing change request as a part of the change management process.
• Provide recommendations for improving overall network security posture.
• Participation in the documentation processes including network diagrams, staff contacts, vendor contacts, utilization of monitoring/resource/inventory management tools.
• Collaborates with managers to develop standards in line with the company guidelines and monitoring those standards.
• Assisting with the resolution of escalated issues and actively participating in problem management activities.
• As a member of the network security operations team participate in an on-call support rotation to ensure 24x7x365 coverage for critical core and customer infrastructure.
• Overtime in the event of emergencies is required.

Senior Network Security Advisor

• Perform analyses of system and coding needs to identify the problems encountered and propose solutions including program specifications.
• Develop system specifications, code, modify, test and debug computer programs under general supervision, in accordance with established planning and deadlines.
• Master the technical and business features of the system to be able to explain them to other colleagues, while interacting effectively with users.
• Translate requirements into technical specifications / software components.
• Organize and manage production sessions.
• Ensure the design and modeling of programmatic solutions for complex problems achieving documented functional and non-functional requirements.
• Review design as part of deliverables (Code and Design Quality).
• Develop and support complex components.
• Support and guide the project team in development activities to ensure the quality of the code delivered while meeting project deadlines.
• Write unit and integration tests for each function in which development is required.
• Participate in the implementation of regression testing strategies to improve the stability of the application components.
• Provide support and maintenance (level 1) for the application and resolve complex anomalies.

Senior Software Developer, Data Security Project

• Own and scale Mozilla’s web bug bounty program, including strategy, prioritization, KPIs, and continuous improvement
• Act as the primary interface with external researchers and platforms (e.g., HackerOne), fostering a high-quality and trusted research community
• Lead triage and technical validation of incoming reports across multiple intake channels (HackerOne, Bugzilla, email)
• Drive end-to-end vulnerability remediation, partnering with engineering teams to ensure timely, effective fixes
• Identify root causes and systemic issues, and influence long-term improvements in secure development practices
• Collaborate with the Security Incident Response Team (SIRT) on active incidents and post-incident reviews
• Perform targeted code reviews (primarily JavaScript and Python) during investigations and high-risk changes
• Develop or leverage tooling to improve triage efficiency, signal quality, and program insights

Senior Security Engineer, Bug Bounty

• Support the end-to-end IT and security risk management lifecycle, including risk identification, assessment, treatment tracking, and reporting
• Maintain and continuously improve the enterprise IT/security risk register, ensuring risks are accurately documented, rated, and assigned to appropriate owners
• Perform risk assessments across technology domains (cloud infra, access management, application security) and third-party assessments using the appropriate methodology for each
• Partner with control owners and business stakeholders to evaluate the effectiveness of risk mitigation controls and identify gaps
• Integrate vendor and technology risk findings into the risk register to facilitate tracking and remediation across both IT/Security and Third-Party Risk Management.
• Contribute to the development and maintenance of risk policies, standards, and procedures
• Assist in preparing risk reporting and dashboards for senior leadership and committee-level audiences
• Monitor the threat and vulnerability landscape and help translate emerging risks into actionable insights for the business
• Support security and compliance initiatives, including PCI DSS, SOC 2, and NIST, from a risk lens, ensuring risk findings are integrated into broader compliance activities
• Participate in risk-related work streams tied to new product launches, infrastructure changes, and strategic initiatives

Security Risk Management Specialist

• Support the oversight and independent challenge of Technology and Cybersecurity risk management activities for the Enterprise
• Communicate risk management practices and methodologies to Executive and senior management
• Conduct appropriate assessment of Technology for risk identification, assessment, reporting, and monitoring
• Keep abreast of Technology and Cybersecurity emerging risks and best practices

Group Risk Specialist – Technology and Cybersecurity Risk Management

• Lead the development and execution of Blue Cross Life's cybersecurity strategy, roadmap, and governance framework
• Oversee the organization's cybersecurity risk management program and security architecture and control environments
• Serve as a trusted advisor to Executive Leadership and the Board by providing clear, actionable insights on cybersecurity risks, trends, and priorities
• Lead cloud security, vulnerability management, threat monitoring, cybersecurity incident response, and data protection initiatives
• Manage key security vendors and managed service providers, ensuring performance, accountability, and effective risk management
• Partner with business leaders, technology teams, risk and compliance teams, and external service providers to strengthen organizational resilience
• Lead and develop the Information Security team while promoting a culture of security awareness and continuous improvement.

Director, Information Security

• Develop and maintain the enterprise security architecture roadmap aligned with corporate security strategy and business goals.
• Establish security reference architectures, patterns, and standards covering on-premises, cloud, and hybrid environments.
• Lead architectural assessments for new technologies, platforms, and major initiatives.
• Architect secure solutions across cloud (Azure/AWS), applications, data, and networks.
• Ensure alignment with regulatory, privacy, and internal policy requirements (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS).
• Partner with risk, compliance, and audit functions to assess security posture and identify architectural gaps.
• Serve as a senior advisor to IT, engineering, and business leaders on secure architecture and emerging threats.

Senior Security Architect

• Own all aspects of the Physical Protection System (PPS), with Genetec Security Centre (access control and VMS) as the primary platform — including configuration, maintenance, troubleshooting, and optimization across a multi-site enterprise architecture.
• Serve as the first point of contact for PPS troubleshooting, conducting root cause analysis and driving defect resolution in partnership with our security integrator and internal IT.
• Oversee and manage the Wealthsimple security integrator relationship, holding vendors accountable to SLAs and quality standards.
• Lead technical planning, testing, and implementation of new security technologies and system integrations, managing projects from scoping through delivery.
• Work with IT/Security teams to improve the existing and future integrations with our IdP, ensuring user onboarding and offboarding is automated correctly and user audits can be done by our IT and Compliance teams.
• Develop and maintain complete technical documentation and controls, system audits, and infrastructure records in partnership with internal and external stakeholders.
• Organize and lead annual penetration testing exercises and oversee remediation of identified vulnerabilities.
• Manage access control credentials and site access programs.
• Develop and lead training, as well as the creation of technical policies and procedures.

Senior Technical Specialist, Corporate Security

• Own Jane's endpoint hardening baseline
• Investigate, contain, and document security incidents
• Strengthen identity and access by helping roll out phishing-resistant MFA (FIDO2)
• Help stand up data-protection controls (SASE, CASB, DLP, egress filtering)
• Tune detections and signal-to-noise in our SIEM

Security Engineer jobs in Canada

See all jobs on JobTailor