Security Engineer

• Lead the development and execution of Blue Cross Life's cybersecurity strategy, roadmap, and governance framework
• Oversee the organization's cybersecurity risk management program and security architecture and control environments
• Serve as a trusted advisor to Executive Leadership and the Board by providing clear, actionable insights on cybersecurity risks, trends, and priorities
• Lead cloud security, vulnerability management, threat monitoring, cybersecurity incident response, and data protection initiatives
• Manage key security vendors and managed service providers, ensuring performance, accountability, and effective risk management
• Partner with business leaders, technology teams, risk and compliance teams, and external service providers to strengthen organizational resilience
• Lead and develop the Information Security team while promoting a culture of security awareness and continuous improvement.

Director, Information Security

• Develop and maintain the enterprise security architecture roadmap aligned with corporate security strategy and business goals.
• Establish security reference architectures, patterns, and standards covering on-premises, cloud, and hybrid environments.
• Lead architectural assessments for new technologies, platforms, and major initiatives.
• Architect secure solutions across cloud (Azure/AWS), applications, data, and networks.
• Ensure alignment with regulatory, privacy, and internal policy requirements (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS).
• Partner with risk, compliance, and audit functions to assess security posture and identify architectural gaps.
• Serve as a senior advisor to IT, engineering, and business leaders on secure architecture and emerging threats.

Senior Security Architect

• Own all aspects of the Physical Protection System (PPS), with Genetec Security Centre (access control and VMS) as the primary platform — including configuration, maintenance, troubleshooting, and optimization across a multi-site enterprise architecture.
• Serve as the first point of contact for PPS troubleshooting, conducting root cause analysis and driving defect resolution in partnership with our security integrator and internal IT.
• Oversee and manage the Wealthsimple security integrator relationship, holding vendors accountable to SLAs and quality standards.
• Lead technical planning, testing, and implementation of new security technologies and system integrations, managing projects from scoping through delivery.
• Work with IT/Security teams to improve the existing and future integrations with our IdP, ensuring user onboarding and offboarding is automated correctly and user audits can be done by our IT and Compliance teams.
• Develop and maintain complete technical documentation and controls, system audits, and infrastructure records in partnership with internal and external stakeholders.
• Organize and lead annual penetration testing exercises and oversee remediation of identified vulnerabilities.
• Manage access control credentials and site access programs.
• Develop and lead training, as well as the creation of technical policies and procedures.

Senior Technical Specialist, Corporate Security

• Own Jane's endpoint hardening baseline
• Investigate, contain, and document security incidents
• Strengthen identity and access by helping roll out phishing-resistant MFA (FIDO2)
• Help stand up data-protection controls (SASE, CASB, DLP, egress filtering)
• Tune detections and signal-to-noise in our SIEM

Enterprise Security Engineer

• Transform and analyze complex, large-scale data to extract the knowledge needed to make decisions.
• Design innovative data analysis approaches (diagnostic, predictive, prescriptive and cognitive) in partnership with experts on the risks associated with application and business processes.
• Implement, evaluate, document and monitor artificial intelligence solutions that are tailored to the monitoring needs of security operations teams.
• Contribute to the industrialization and development of security analytics methodologies, including by participating in research projects with partners in the industry and academic ecosystem.
• Identify, evaluate and prioritize data valorization opportunities, define solutions and develop an analytical roadmap that is integrated with Desjardins Group’s business plan and strategic vision.
• Ensure delivery teams are aligned in terms of the design and development of highly complex analytical solutions.

Senior Security Data Scientist

• Lead strategic initiatives in the AI and data security domains
• Develop and maintain an AI and data security capabilities roadmap
• Establish clear security requirements for AI systems, data pipelines, and storage solutions
• Engage with stakeholders to prioritize initiatives that strengthen Data And AI posture
• Deliver a detailed capability framework, aligned to the strategic expectations of CISO
• Facilitate fact-based, data-driven decision-making with domain expertise
• Collaborate with cross-functional teams to gather feedback, identify improvement areas

Program Manager, Data and AI Security

• Extensive experience in pre-sales designing and proposing secure platform solutions
• Building technical security solutions, proving their viability and providing technological justifications
• Design complete network, cloud and security solutions providing strong technical roadmaps
• Identify technical opportunities within the field to increase pipeline growth and team prosperity
• Leading proof of concept valuations, technical workshops and events
• Collaborate with Account Manager to answer/ educate the customer on issues
• Strategizing about future services or capabilities customers may require within your account base
• Support your customer through issue resolution by collaborating with TAC and other technical resources
• Build technical business relationships with key customers and partners
• Regularly interface, providing technology enablement in your region
• Mentor others with your expertise while collaborating with a team of industry experts

Presales Security Expert – Enterprise

• Pre-sales - assist in qualifying sales leads from a technical standpoint.
• Sales calls - be the main technical resource on sales calls and answer/ educate the customer on issues ranging from features, specifications and functionality to integration.
• Conversant with networking applications and solutions.
• Experience with virtualization, NFV and emerging SDN technologies
• Post-sales - be the lead technical contact for identified accounts for technical issues and will work closely with the technical support team and engineering to answer, elevate and resolve customers technical issues.
• Provide assistance to identified customers with post-sales training.
• Regularly interface, provides presales support and assist in training Fortinet Channel partners in your region.
• Presenting at events, seminars, customer and partner meetings
• Flexible to travel. Travel will primarily be within the SEs designated region, but may also include occasional travel to other regions.

Presales Security Expert – Inside Territory Account Manager

• Design and lead adversarial testing of LLM and AI-driven systems
• Conduct threat modelling across model, infrastructure and data layers
• Execute and oversee testing for:
• Prompt injection
• Jailbreaking
• Model exploitation
• Data leakage / extraction
• RAG system manipulation
• Translate findings into structured, audit-ready documentation
• Map vulnerabilities and remediation pathways to:
• ISO 27001 controls
• SOC 2 Trust Service Criteria
• ISO 27701 privacy controls
• ISO 27017 cloud security controls
• Partner closely with engineering, security, and compliance functions
• Present findings clearly to executive leadership

Principal Engineer, AI Security – AI Red Team

• Sell and provide advice on life, health, disability and critical illness insurance products
• Assess customer satisfaction and service quality, follow up and make improvements as needed
• Establish and maintain good relationships with referral sources
• Help target and analyze potential member/client files
• Act on business opportunities and present information to partners so that members and clients can reach their financial goals
• Monitor the industry to identify business development opportunities and stay on top of new products and trends

Financial Security Advisor, Life and Health Insurance

• Design, implement, and maintain Microsoft 365 security and compliance solutions
• Safeguard sensitive data and manage access controls
• Monitor compliance posture and produce actionable insights
• Collaborate with IT, Legal, Risk, and Security teams
• Participate in incident response and investigations
• Maintain awareness of emerging Microsoft 365 compliance features

Senior Security Engineer – Microsoft Purview

• We’re looking for a senior infrastructure professional who enjoys solving practical security challenges and improving how security is delivered across enterprise systems.
• This role sits within the IT Infrastructure team and works closely with Cybersecurity, with a strong focus on implementation, remediation, and secure operations across Windows and Linux environments.
• You’ll take direct ownership of vulnerability remediation, help improve patching cycles, and ensure systems are securely configured and operationally resilient.
• You’ll also contribute to key initiatives including certificate lifecycle management and the operational use of security platforms such as Privileged Access Management and Cloudflare.

Senior IT Infrastructure Administrator, Security

• Hands-on infrastructure security role with real ownership and visible impact
• We’re looking for a senior infrastructure professional who enjoys solving practical security challenges and improving how security is delivered across enterprise systems.
• Take direct ownership of vulnerability remediation, help improve patching cycles, and ensure systems are securely configured and operationally resilient.
• Contribute to key initiatives including certificate lifecycle management and the operational use of security platforms such as Privileged Access Management and Cloudflare.
• Administer and harden Windows Server environments, including Active Directory, Group Policy, DNS, authentication, and certificate services, with supporting Linux administration.
• Support certificate lifecycle management, including TLS/PKI, renewals, and ongoing certificate operations.
• Work with core security platforms such as PAM solutions and Cloudflare, and support logging and monitoring platforms such as Sumo Logic or Splunk.
• Partner closely with Cybersecurity and infrastructure stakeholders to implement approved controls, remediate findings, and improve how security is operationalized across environments.
• Applicants must be within a commutable distance (within 2 hours or 80 miles) of one of the listed offices

• Comply with the organization’s mandatory health, safety and environment (HSE) policies, procedures and guidelines to identify and mitigate environmental risks and risks to the well‑being of oneself and others at work.
• Train the team on safe work methods, identify at‑risk behaviors within the team and take appropriate actions, escalating more serious issues when necessary.
• Respond to requests from internal and external clients or suppliers by providing information on complex processes and related policies, and refer questions requiring policy interpretation to the appropriate parties.
• Contribute to the preparation of various reports related to data and analysis.
• Provide coaching to team members to support the development of their skills.
• Meet individual objectives and use performance management systems to improve one’s performance; or supervise team performance, assign work, monitor progress and take corrective actions as needed to ensure deadlines and quality standards are met. Also contribute to the formal performance evaluation and management process.
• Develop, test and maintain procedures and guidelines to support the organization in implementing and complying with internal policies and/or external regulatory requirements.
• Plan and coordinate product and process testing and inspection activities. Implement corrective actions or continuous improvement initiatives and follow up to verify their effectiveness.
• Investigate routine incidents using established compliance processes, systems and procedures, and take necessary steps to address immediate compliance issues. Advise more experienced colleagues on more complex matters.
• Supervise and monitor a team’s work to ensure that processes and procedures are applied correctly and that the team meets established objectives and standards.

Health, Safety and Environment Advisor

• Plan and execute full‑scope red team engagements, including reconnaissance, initial access, lateral movement, privilege escalation, command-and-control, and objective completion
• Emulate real-world threat actors using established TTPs (e.g., MITRE ATT&CK)
• Conduct phishing and social engineering campaigns within defined legal and ethical constraints
• Develop and maintain custom tooling, payloads, and infrastructure to support operations
• Collaborate closely with Blue Team, Purple Team, Threat Intelligence, and Incident Response partners
• Produce clear, technically accurate engagement reports and executive-ready summaries
• Contribute to detection engineering by identifying gaps in controls, telemetry, and response processes
• Support continuous improvement of red team methodologies, playbooks, and governance processes
• Mentor junior operators and contribute to team knowledge sharing

Information Security Specialist – Red Team Operator

• Create and maintain high-quality online legal content
• Research, draft, and maintain practical data privacy & cybersecurity legal know-how content
• Monitor legal, practice, and market developments in data privacy & cybersecurity globally
• Support the development of AI-powered tools and identify methods for content development and AI solutions
• Partner with Product Management to innovate on tech development and product enhancements
• Establish relationships with external law firm contributors and industry groups
• Support sales, marketing, and respond to customer inquiries

Senior Specialist, Legal Editor – Data Privacy & Cybersecurity

• Execute and complete vehicle cybersecurity design support tasks and project assignments in support of prototyping/testing & product development activities per Engineering cybersecurity product development processes.
• Coordinate own tasks to ensure deadlines are met per project schedule and applicable lead times. Includes maintaining task status, task progress and communicating risks to task scope change.
• Perform cybersecurity assessment and analysis to ensure compliance with internal process criteria and all applicable standards and regulations.
• Check Engineering Documents, Instructions to Service, Shop Floor Instructions and other documents as applicable and authorized.
• Assist Engineering teams in formulating plans, item definitions and requirements to support vehicle cybersecurity initiatives.
• Undertake cybersecurity activities in the development phases of the security lifecycle and the Engineering Product Development process.
• Collaborate with engineering design teams and delivers cyber security work products while also aiding, guiding, and supporting to ensure they are actioned.
• Review the security compliance and alignment with customer and supplier management programs.
• Conduct effective communication, cooperation, and information flow with other departments and key NFI Group contacts.
• Interact with vendors and customers on cybersecurity related issues as needed.
• Participate in Engineering and other meetings to review departmental issues.
• Develop documents and maintain meeting architecture including regular reviews while ensuring corrective actions are taken and implemented.
• Report weekly on status including completed and outstanding work.
• Complete and support the development, design, & testing of cybersecurity critical systems and controls.
• Support establishing new engineering processes and procedures, tools and documentation based upon implementing ISO21434 Cybersecurity.
• Provide Engineering support where required to vehicle cybersecurity incidences and incidence response plans should they occur.

Vehicle Cybersecurity Design Specialist

• Help develop and optimize security measures to align with corporate objectives
• Plan, implement and oversee best practices to strengthen Desjardins's security posture
• Advise and assist clients and partners on major security-related initiatives and development projects
• Develop tools, methods and processes
• Propose recommendations, solutions and action plans based on the organization's objectives and priorities
• Diagnose issues, risks, needs and challenges for your line of work to determine target outcomes
• Help develop and implement objectives, solutions, policies, programs and action plans to mitigate risks
• Analyze data, conduct studies, make recommendations and write reports
• Help train internal stakeholders, raise awareness and communicate information

Security Advisor

• End-to-end ownership of our cloud infrastructure on GCP, architecture, reliability, cost, scalability, and operational excellence
• The full cloud-native application environment; containerized and serverless workloads, cloud networking, and the large-scale, multi-tenant data layer (many terabytes of customer data on MongoDB Atlas), including the architecture, performance, and scaling decisions across all of it
• Deployment, release, and maintenance processes, with a focus on uptime and minimizing customer-facing disruption, recognizing that a platform outage during an active warehouse shift is a customer event, not just a ticket
• Leadership of our senior SRE, providing direction and architectural vision to move the platform forward
• Our overall security program, policy, posture, tooling, and incident response, across both businesses
• Achieving and maintaining SOC 2 Type II (and evaluating ISO 27001 as the customer base demands), including driving the program, evidence, and audit relationships
• Customer-facing security: questionnaires, audits, and trust conversations with security-conscious enterprise buyers
• Data protection obligations as a data processor, including PII handling and relevant privacy regimes (e.g. GDPR, CCPA)
• Managing security vendor relationships (MDR/EDR, SIEM, endpoint protection, penetration testing)
• Oversight of the internal IT function, corporate network, on-prem and cloud infrastructure, identity, endpoint management, help desk, and vendor relationships
• Light-touch oversight of a small, hosted WMS environment on GCP, including its reliability and availability commitments
• Mentorship and development of an established IT team, including an IT Manager and IT Administrators who handle the day-to-day

Head of Infrastructure, Security

• Ensure the security, integrity, and availability of Dentons Canada information assets.
• Contribute to the management and continuous improvement of multiple security programs.
• Develop, implement, and maintain security controls, through people, processes, and technology, across the organization.
• Provide technical leadership and architectural oversight for the Firm’s security controls across on-premises and cloud environments.
• Lead the design and implementation of secure architecture patterns for enterprise infrastructure, cloud platforms, identity services, and network security.
• Act as a key security advisor to Infrastructure, Cloud, and Application teams to ensure security is embedded into platform design, deployments, and operational processes.
• Support the secure adoption and governance of Microsoft Azure, including the design and implementation of security controls for identity, networking, workloads, and platform services.
• Lead the configuration and optimization of Azure security capabilities including Microsoft Defender for Cloud, Conditional Access, Azure Policy, identity protection controls, and security monitoring integrations.
• Provide architectural guidance for secure network connectivity and access models.
• Monitor emerging threats, vulnerabilities, and technology trends and recommend improvements to strengthen the Firm’s security architecture and overall security posture.
• Mentor and provide technical guidance to Information Security team members across operational and engineering initiatives.

Security Engineer jobs in Canada

See all jobs on JobTailor

Director, Information Security

Senior Security Architect

Senior Technical Specialist, Corporate Security

Enterprise Security Engineer

Senior Security Data Scientist

Program Manager, Data and AI Security

Presales Security Expert – Enterprise

Presales Security Expert – Inside Territory Account Manager

Principal Engineer, AI Security – AI Red Team

Financial Security Advisor, Life and Health Insurance

Senior Security Engineer – Microsoft Purview

Senior IT Infrastructure Administrator, Security

Senior IT Infrastructure Administrator, Security

Health, Safety and Environment Advisor

Information Security Specialist – Red Team Operator

Senior Specialist, Legal Editor – Data Privacy & Cybersecurity

Vehicle Cybersecurity Design Specialist

Security Advisor

Head of Infrastructure, Security

Information Security Lead