Security Engineer

• Partner with infrastructure, cloud, and application teams to embed security controls across cloud-native services, APIs, on-premise systems, and SaaS platforms
• Identify security gaps and vulnerabilities, prioritize remediation, and develop tactical remediation plans
• Design and implement security tooling, hardening standards, and automation
• Contribute to threat modelling, security architecture reviews, and emerging-technology assessments
• Monitor the threat landscape and translate new attack techniques into security improvements
• Embed as a security partner within delivery squads and agile teams during design, development, and deployment
• Review project documentation, architecture diagrams, code changes, and configuration decisions
• Champion secure-by-default patterns, DevSecOps, and shift-left security
• Develop and maintain security standards, guidelines, and reusable patterns
• Advise product and engineering stakeholders on risk-based decisions
• Assess and address AI/ML security risks, including model integrity, data pipeline security, prompt injection, and secure AI deployment
• Support AI security risk assessments, reviews, governance, and collaboration with platform and delivery teams
• Apply AI/ML tools to anomaly detection, threat hunting, alert triage, and other security operations
• Evaluate AI-assisted security tooling
• Collaborate with technology and business stakeholders to align security with EDC’s transformation roadmap
• Communicate security concepts to technical and non-technical audiences
• Contribute to KPI and metrics development for security posture improvements
• Support continuous improvement and evolution of the security program

Cybersecurity Engineer securing EDC’s financial solutions and global trade technology

Cybersecurity Engineer

Cybersecurity Engineer strengthening security across EDC’s cloud, applications, and enterprise technology. Supporting secure delivery and AI/ML security for Canada’s export finance corporation.

• Collaborate with the infrastructure, cloud, and application teams to integrate security controls into EDC’s technology stack
• Identify security gaps and vulnerabilities, prioritize remediation measures, and develop tactical plans
• Design and implement security and automation tools and hardening standards
• Contribute to threat modeling, security architecture reviews, and assessments of emerging technologies
• Monitor the threat landscape and develop actionable improvements
• Act as a security partner to agile and delivery teams throughout design, development, and deployment
• Conduct security reviews of project documentation, architecture diagrams, code changes, and configuration decisions
• Promote secure-by-default practices, DevSecOps, and a shift-left approach
• Design and maintain reusable security standards, guidelines, and templates
• Advise engineering and product stakeholders and translate security risks into business language
• Assess security risks associated with AI and machine learning workloads
• Support EDC’s AI security approach through risk assessments, security reviews, and governance feedback
• Use AI and machine learning to improve security operations, including anomaly detection, threat hunting, and alert triage
• Explore and evaluate AI-assisted security tools
• Collaborate with stakeholders to align security practices with EDC’s strategic objectives and 2030 roadmap
• Communicate complex security concepts to technical and non-technical audiences
• Contribute to key performance indicators and metrics tracking the progress of the security posture
• Contribute to continuous improvement initiatives and the evolution of the security program

Ingénieur cybersécurité renforçant la sécurité d’EDC, société canadienne de financement du commerce international

Ingénieur cybersécurité renforçant la posture de sécurité d’EDC, société canadienne de financement du commerce international. Intégration de contrôles, DevSecOps et sécurité de l’IA.

• Lead day-to-day program management activities for cybersecurity initiatives
• Drive execution across multiple cybersecurity programs and security functions
• Develop and maintain program plans, dependencies, risks, issues, and executive-level status reporting
• Connect cybersecurity strategy to tactical delivery, define ownership, and ensure understanding of technical dependencies and operational changes
• Lead organizational and operational change management activities
• Manage the program lifecycle from scope definition and stakeholder alignment through execution, readiness, and adoption
• Facilitate discussions, workshops, and decision-making forums
• Define objectives, milestones, success metrics, and reporting mechanisms
• Identify technical risks, operational dependencies, resource constraints, and decision points
• Develop mitigation plans and escalate issues with recommendations
• Partner with cybersecurity leadership, engineering, operations, product, and business stakeholders
• Track actions, deliverables, and accountability across workstreams
• Prepare executive communications, presentations, and program updates
• Assess program processes and implement best practices to improve delivery effectiveness

Senior Program Manager driving enterprise cybersecurity initiatives for NBCUniversal’s media and entertainment business

Senior Program Manager, Cyber Security

Senior Program Manager driving enterprise cybersecurity programs for NBCUniversal, a global media and entertainment company. Coordinating technical delivery, operational change, adoption, risk, and executive reporting.

• Serve as the primary Security partner for software and engineering teams
• Evaluate security posture across the organization
• Plan and execute red team operations, adversary simulations, and targeted security assessments focused on cloud environments
• Evaluate cloud infrastructure, identity architectures, CI/CD pipelines, containerized workloads, and cloud-native services
• Identify and validate attack paths involving IAM misconfigurations, overprivileged roles, secrets exposure, metadata abuse, insecure automation, and cloud service configuration weaknesses
• Assess detection and response coverage by exercising logging, alerting, monitoring, and incident response processes with blue team and detection engineering functions
• Track emerging attacker techniques, cloud exploitation trends, and new abuse paths relevant to modern enterprise environments
• Drive remediation efforts for identified issues

Red Team Security Engineer securing Motive's fleet-management platform and cloud infrastructure

Red Team Security Engineer

Red Team Security Engineer evaluating Motive's fleet-management platform and cloud environments. Executing adversary simulations, validating detection coverage, and driving remediation of security issues.

• Assess and improve the security of public cloud environments across AWS, Microsoft Azure, and Google Cloud Platform
• Participate in hands-on Red and Purple Team Exercises in mature production environments
• Develop, evolve, and refine offensive tradecraft and tooling
• Partner with Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, SOC/IR, and ATO ML/AI analytics teams
• Liaise with cloud operations, internal customers, the security operations center, business stakeholders, and management regarding information security incidents and trends

Senior Security Specialist securing RBC’s cloud banking environments across AWS, Azure, and Google Cloud

Senior Security Specialist – Cloud

Senior Security Specialist securing RBC’s cloud banking environments across AWS, Azure, and Google Cloud. Executing red/purple team exercises and refining offensive security tooling.

• Operate and continuously tune BloodHound Enterprise to map identity attack paths across on-prem AD, Entra/Azure, AWS, GCP, DevOps, and PAM platforms
• Analyze attack path data to identify choke points and Tier Zero exposures, prioritizing remediation by real-world exploitability and business impact
• Validate data collection accuracy and ensure attack path fidelity
• Extend attack path coverage into CI/CD pipelines, secrets management, IAM tooling, and other platforms with OpenHound
• Help design custom collectors to enrich BloodHound attack path data beyond out-of-the-box coverage
• Assist the Red Team in building realistic attack paths for covert operations and adversary emulation exercises
• Build relationships with Cloud Engineering, Cloud Security, IAM, Threat Detection, and Incident Response teams
• Communicate attack path exposure, remediation progress, and identity risk trends to cloud operations, internal customers, the SOC, IR, and business stakeholders
• Work in complex and critical environments that power the economy
• Collaborate with offensive, defensive, and threat hunting security experts to refine and expand skills

Senior Security Specialist managing identity attack paths at RBC, a Canadian bank

Senior Security Specialist – Attack Path Management

Senior Security Specialist operating BloodHound Enterprise for RBC, a Canadian bank. Mapping identity attack paths and prioritizing remediation across cloud, AD, DevOps, and PAM environments.

• Develop and optimize security measures aligned with corporate objectives
• Plan, implement and oversee security best practices to strengthen Desjardins's security posture
• Develop the Desjardins Group Security Office's priorities and governance
• Lead large-scale development projects, initiatives and activities in security
• Identify, develop and recommend security strategic directions
• Advise clients and partners on strategic projects and initiatives
• Identify, analyze, report and diagnose major issues and recommend solutions
• Develop and update policies, standards, models and programs
• Offer security programs to internal employees to promote ethics and compliance
• Represent the unit before senior management committees and decision-making bodies
• Represent and negotiate on behalf of Desjardins and enter the organization into agreements with external partners and organizations
• Serve as an expert advisor, subject matter expert, resource person and coach for senior management and decision-making bodies

Senior security advisor strengthening Desjardins's financial security posture

Senior Security Advisor

Senior security advisor strengthening Desjardins's security posture across governance, data protection, and fraud prevention. Leading complex strategic initiatives for the Desjardins financial services organization.

• Develop and optimize security measures aligned with corporate objectives
• Plan, implement and oversee security best practices to strengthen Desjardins's security posture
• Develop priorities and governance for the Desjardins Group Security Office
• Lead large-scale development projects, initiatives and activities in security
• Identify, develop and recommend security strategic directions
• Advise clients and partners on strategic projects and initiatives
• Identify, analyze, report and diagnose major issues and recommend solutions
• Develop and update policies, standards, models and programs
• Offer security programs to internal employees to promote ethics and compliance
• Represent the unit before senior management committees and decision-making bodies
• Represent and negotiate on behalf of Desjardins and enter into agreements with external partners and organizations
• Serve as expert advisor, subject matter expert, resource person and coach for senior management and decision-making bodies

Senior security advisor strengthening Desjardins's financial cooperative security posture

Senior security advisor strengthening Desjardins's financial cooperative security posture. Leading strategic security initiatives, governance, policies and complex enterprise projects.

• Develop and optimize security measures aligned with corporate objectives
• Plan, implement and oversee security best practices to strengthen Desjardins's security posture
• Help develop the Desjardins Group Security Office's priorities and governance
• Lead practitioners on development projects and innovative, complex strategic security initiatives
• Lead large-scale development projects, initiatives and activities in the specialty area
• Design, update, implement and monitor complex action plans, programs, solutions and tools
• Advise clients and partners on strategic projects and initiatives
• Identify, analyze, report and diagnose major issues and recommend solutions to decision-making bodies
• Develop and update policies, standards, models and programs
• Represent the unit to decision-making bodies for agreements with external partners and organizations
• Serve as a specialist advisor, subject matter expert, resource person and coach for decision-making bodies

Senior security advisor strengthening Desjardins's financial cooperative security posture. Leading complex security initiatives, governance, policies and enterprise-wide risk solutions.

• Develop and optimize security measures aligned with corporate objectives
• Plan, implement and oversee best practices to strengthen Desjardins's security posture
• Help develop the Desjardins Group Security Office's priorities and governance
• Lead practitioners on development projects and innovative, complex strategic security-related initiatives
• Lead large-scale development projects, initiatives and activities in the specialty area
• Design, update, implement and monitor complex action plans, programs, solutions and tools
• Advise clients and partners on strategic projects and initiatives
• Identify, analyze, report and diagnose major issues and recommend solutions to decision-making bodies
• Develop and update policies, standards, models and programs
• Represent the unit to decision-making bodies for agreements with external partners and organizations
• Serve as a specialist advisor, subject matter expert, resource person and coach for decision-making bodies

Senior security advisor strengthening Desjardins's financial services security posture

Senior security advisor strengthening Desjardins's financial services security posture. Leading complex security initiatives, governance, policies, and enterprise-wide risk solutions.

• Lead cybersecurity guidance for system implementations, upgrades, and digital transformation initiatives
• Review and influence secure architecture across IT and OT environments, including ICS/SCADA, IoT, and industrial networks
• Conduct threat modeling and security design reviews for business and industrial systems
• Enable initiatives in cloud security, Zero Trust architecture, identity management, and AI governance
• Identify, assess, and prioritize cybersecurity risks across IT and mining/manufacturing operations
• Support risk mitigation plans and execution
• Perform risk assessments for projects, vendors, and operational technologies
• Support incident response planning and risk-based decision-making
• Advise on the definition, implementation, and revision of IT/OT security policies, standards, and procedures
• Oversee security control implementation across IT and OT projects
• Recommend enhancements aligned with NIST, CIS, ISO, and other frameworks and best practices
• Enable cybersecurity risk management activities, including risk assessments, audits, mitigation planning, and execution
• Support post-incident reviews and continuous improvement
• Ensure adherence to relevant frameworks and regulations, including ISO 27001, NIST, and IEC 62443
• Support internal and external audits
• Maintain compliance documentation and evidence
• Act as a trusted advisor to business and technical stakeholders
• Work closely with IT teams on secure design, implementation, and operation of cloud and application environments
• Provide technical guidance on configurations, integrations, and remediation
• Support company-wide awareness programs and improve security posture by addressing emerging cloud and AI-related threats
• Foster a collaborative, inclusive, and service-oriented team culture across Alcoa teams

Cybersecurity Advisor securing Alcoa’s sustainable aluminum mining and manufacturing operations

Cybersecurity Advisor – North America

Cybersecurity Advisor securing Alcoa’s sustainable aluminum mining and manufacturing operations. Advising IT and OT stakeholders on architecture, risk, compliance, and emerging cloud and AI threats.

• Protect Kepler's corporate, cloud, and operational infrastructure.
• Own, operate, and continuously improve vulnerability management, security monitoring and SIEM, endpoint security, infrastructure hardening, and incident response capabilities.
• Provide security engineering expertise for infrastructure, cloud environments, networks, systems, and related technologies.
• Review architectures, identify security risks, and recommend practical controls and mitigation measures.
• Assess and improve controls across networks, servers, operating systems, cloud infrastructure, databases, firewalls, identity systems, and other infrastructure technologies.
• Develop and maintain secure configuration and system-hardening standards based on CIS Benchmarks and NIST guidance.
• Integrate security requirements into infrastructure design, implementation, and operational processes.
• Manage vulnerability scanning, findings analysis, risk prioritization, remediation coordination, metrics, and vulnerability management technologies.
• Own SIEM and monitoring capabilities, onboard log sources, develop and tune detection use cases, monitor visibility, and coordinate with MDR/SOC providers.
• Own endpoint security and EDR/XDR capabilities; investigate alerts and support containment, remediation, and recovery.
• Contribute to cybersecurity incident investigations, containment, remediation, recovery, evidence collection, and post-incident reviews.
• Assess and secure AWS and/or Microsoft Azure environments, including IAM, logging, network security, and automation opportunities.
• Support Government of Canada and regulated-environment security requirements, assessments, audits, inspections, certification activities, remediation, and control documentation.
• Report to the VP, Information Security & CISO and collaborate with IT, Engineering, Operations, Security, Facilities, program teams, and external providers.

Senior Infrastructure Security Specialist protecting Kepler’s commercial space-connectivity infrastructure

Senior Infrastructure Security Specialist

Senior Infrastructure Security Specialist protecting Kepler’s corporate, cloud, and operational infrastructure. Securing satellite-connectivity operations and Government of Canada environments through vulnerability management, SIEM, endpoint security, and incident response.

• Own cloud security posture management across configurations, workloads, and entitlements across AWS and Azure
• Implement identity and access management, least privilege, federation, SSO, secrets management, privileged access, and workload and non-human identity controls
• Design network segmentation, zero-trust access, firewalls, web application firewalls, and traffic inspection across cloud and hybrid networks
• Implement container security, encryption, key management, and policy-as-code guardrails
• Shift application security left in CI/CD through static, dynamic, dependency, and software supply-chain scanning
• Perform threat modeling and secure-by-design reviews
• Lead data classification, encryption, tokenization, key management, data loss prevention, and privacy-by-design practices for PHI and ePHI
• Design AI, machine-learning, and generative-AI guardrails, data protection, abuse and misuse controls, and monitoring
• Tune SIEM and cloud-native detections, drive event correlation, and lead incident response
• Run vulnerability scanning, coordinate penetration testing, and drive findings through remediation
• Maintain security baselines, configuration compliance, controls, logging, and audit evidence
• Coach engineers across teams to make secure practices the default
• Perform other duties as assigned

Senior Cloud Security Engineer securing ComPsych’s cloud-based mental health and absence-management platforms

Senior Cloud Security Engineer

Senior Cloud Security Engineer securing ComPsych’s cloud-based mental health and absence-management platforms. Building cloud, application, data, AI, detection, and compliance controls.

• Support an external software development organization as part of Inviso’s delivery team
• Work closely with client product, engineering, security, and business stakeholders
• Help design, secure, and deliver the foundations of an enterprise AI platform
• Perform threat modeling and apply findings to architecture, engineering, and delivery decisions
• Design and review tenant isolation across control plane, data plane, application, and infrastructure boundaries
• Establish identity, authorization, secure delivery practices, and compliance-by-design
• Secure systems executing untrusted content, code, tools, or agent actions
• Provide practical security guidance that enables teams to ship reliable, compliant, and secure platform capabilities
• Raise the security bar while enabling delivery teams to move quickly and responsibly
• Travel occasionally as required by client needs

Security and Identity Engineer securing enterprise AI platforms for transportation technology clients

Security & Identity Engineer

Security and Identity Engineer securing enterprise AI platforms for mission-critical transportation and operational technology environments. Designing tenant isolation, identity, authorization, threat models, and compliance-by-design practices.

• Design and evolve solutions for secrets management, cryptographic keys, digital certificates, and privileged accounts
• Define integration patterns and support IT teams in securely using HashiCorp Vault, Azure Key Vault, and PKI solutions
• Contribute to certificate lifecycle management, crypto-agility, cryptographic inventory, and post-quantum cryptography initiatives
• Design and continuously improve privileged access management mechanisms using least privilege, segregation of duties, and traceability
• Collaborate with delivery, architecture, and project teams to integrate security requirements into technology solutions
• Produce high-quality documentation, integration guides, and reference models

Security Designer strengthening iA Financial Group’s insurance and wealth-management cybersecurity

Security Designer

Security Designer strengthening iA Financial Group’s insurance and wealth-management cybersecurity. Designing cryptography, secrets management, certificates, and privileged-access solutions.

• Conduct a comprehensive assessment of the Foundation’s technology and cybersecurity environment.
• Develop a target operating model and prioritized technology and cybersecurity roadmap.
• Establish technology governance, documentation, decision-making and accountability practices.
• Advise the COO and executive leadership on technology risks, investments and emerging requirements.
• Maintain accountability for availability, reliability, performance and security of the technology environment.
• Oversee on-premises servers, network infrastructure, cloud services, Microsoft 365, SharePoint, end-user devices and specialized applications.
• Ensure monitoring, maintenance, configuration, patching, backup, vulnerability remediation and lifecycle management.
• Provide hands-on technical support, investigation and remediation for complex or sensitive issues.
• Establish and oversee a comprehensive cybersecurity program, including identity and access management, security monitoring, vulnerability management, endpoint protection, email security, network security and data protection.
• Lead preparation for and response to cybersecurity and significant technology incidents.
• Own technology components of business continuity and disaster recovery programs.
• Manage the managed service provider and other IT and cybersecurity vendors.
• Provide leadership, direction and technical oversight to the IT Manager.
• Oversee administration, integration, security and lifecycle management of core technology platforms.
• Develop policies, procedures, standards, documentation and executive reporting.
• Support cyber insurance applications, audits and risk assessments.
• Develop and manage the annual IT and cybersecurity budget and evaluate technology investments.

Director leading IT and cybersecurity operations for Canada’s Azrieli philanthropic foundation

Director, IT & Cybersecurity

Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.

• Develop and optimize security measures aligned with corporate objectives
• Plan, implement and oversee best practices to strengthen Desjardins's security posture
• Help develop the Desjardins Group Security Office's priorities and governance
• Lead practitioners on development projects and innovative, complex, cross-sector strategic initiatives related to security
• Develop and recommend strategic directions and business positions
• Lead large-scale development projects, initiatives and activities in the area of expertise
• Identify, develop and recommend security strategic directions balancing business needs, requirements and best practices
• Advise clients and partners on positioning, planning, development, execution and monitoring of strategic projects and initiatives
• Identify, analyze, report and diagnose major issues and recommend solutions to decision-making bodies
• Develop and update policies, standards, models and programs
• Offer security programs to internal employees to promote the organization's culture of ethics and compliance
• Represent the unit before senior management committees and decision-making bodies
• Represent and negotiate on behalf of Desjardins and enter the organization into agreements with external partners and organizations
• Serve as an expert advisor, subject matter expert, resource person and coach for senior management and decision-making bodies

Senior security advisor strengthening Desjardins's cooperative financial security posture

Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization-wide projects.

• Hunt for TTPs, threats, risks, and vulnerabilities aligned to the MITRE ATT&CK framework using internal and external intelligence data
• Identify threats, risks, and security control gaps and produce detection and mitigation recommendations to reduce the bank’s attack surface
• Participate in proactive attack surface reduction operations across enterprise and cloud environments
• Use threat intelligence, anomalous log analysis, and brainstorming-session results to detect and mitigate threats
• Develop methodologies to identify adversary tools, techniques, and procedures
• Produce metrics and dashboards identifying potential threats, suspicious or anomalous activity, and malware
• Tune detection infrastructure with technology teams to identify emerging threats
• Document best practices for hunting playbooks, procedures, and courses of action
• Serve as a subject matter expert in host-based and network-based hunting analysis
• Collaborate with intelligence, SOC, incident response, and security engineering teams
• Review internal processes and activities and identify improvement opportunities
• Influence behavior to reduce risk and strengthen the enterprise information security culture
• Monitor emerging issues, industry trends, and relevant changes to the security landscape

Information Security Specialist reducing attack surfaces at TD, a global financial institution

Information Security Specialist – Attack Surface Reduction

Information Security Specialist reducing attack surfaces at TD, a global financial institution. Hunting threats, analyzing security data, and improving detection across enterprise and cloud environments.

• Identify, analyze, eradicate and mitigate threats to Desjardins's systems, networks and applications
• Simulate threats based on the continuous evolution of offensive techniques and threat actors
• Design, develop and implement offensive methodologies and tools while mitigating associated risks
• Follow rigorous processes and develop new ones to prepare the organization to face cyberattacks
• Lead practitioners on development projects and complex, strategic initiatives
• Clarify risks using simple language and involve stakeholders to strengthen Desjardins's security posture
• Lead large-scale development projects, initiatives and activities with organization-wide impact
• Advise clients and partners on positioning, planning, development, solution selection, execution and monitoring of strategic projects and initiatives
• Develop and update policies, standards, models, methodologies, tools and programs
• Conduct strategic monitoring to identify emerging security issues
• Identify and analyze major issues, diagnose them and make recommendations to decision-making bodies
• Analyze, map and explain threats to guide test activities
• Represent the unit before decision-making bodies
• Represent Desjardins in agreements with external partners and organizations
• Serve as a specialist advisor, subject matter expert, resource person and coach for decision-making bodies

Senior security advisor protecting Desjardins cooperative financial systems from cyber threats

Senior Offensive and Defensive Security Advisor

Senior offensive and defensive security advisor protecting Desjardins cooperative financial systems from cyber threats.
Leading threat simulation, security methodologies, strategic initiatives and organization-wide cyber risk mitigation.

• Perform and lead technical aspects of electric substation SCADA and cybersecurity system design deliverables
• Ensure design compliance with NERC CIP, IEC 62443, IEC 61850, DNP, applicable codes, and industry best practices
• Provide functional design specifications for complex SCADA and cybersecurity systems across multiple sites
• Lead project design teams to deliver high-quality products on time and under budget
• Review and coordinate vendor and manufacturer detailed designs
• Coordinate SCADA and cybersecurity design with protection and control, primary design, site management, commissioning, and field personnel
• Develop Factory Acceptance Testing and Site Acceptance Testing procedures and participate in FAT and SAT
• Prepare engineering estimates for SCADA systems
• Estimate equipment quantities and costs for proposals
• Communicate with the Project Engineering Manager regarding material cost, schedule, engineering budget, safety, and quality impacts
• Report project opportunities and risks to the Project Engineering Manager and Project Manager

Lead SCADA and cybersecurity engineer designing substation systems for GE Vernova’s decarbonization mission

Lead SCADA, Cybersecurity Engineer

Lead SCADA and cybersecurity engineer designing compliant electric-substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.

Security Engineer jobs in Canada

See all jobs on JobTailor

Cybersecurity Engineer

Cybersecurity Engineer

Senior Program Manager, Cyber Security

Red Team Security Engineer

Senior Security Specialist – Cloud

Senior Security Specialist – Attack Path Management

Senior Security Advisor

Senior Security Advisor

Senior Security Advisor

Senior Security Advisor

Cybersecurity Advisor – North America

Senior Infrastructure Security Specialist

Senior Cloud Security Engineer

Security & Identity Engineer

Security Designer

Director, IT & Cybersecurity

Senior Security Advisor

Information Security Specialist – Attack Surface Reduction

Senior Offensive and Defensive Security Advisor

Lead SCADA, Cybersecurity Engineer