Job Title: Security Specialist - Intermediate (Cyber Security)
Location: Toronto (Hybrid - up to 3 days onsite per week)
Contract Duration: 10 months
Pay rate: $60-65 based on experience
We are looking for a hands-on intermediate Security Specialist. In this operational role, you will focus on two core pillars: designing and maturing a Continuous Threat Exposure Management (CTEM) program, and driving DevSecOps pipeline security alongside Cloud Security Posture Management (CSPM/CNAPP) across AWS and Azure environments. If you excel at turning security insights into concrete technical solutions and working collaboratively across cross-functional teams, we want to hear from you!
Must-Haves
- Continuous Threat Exposure Management (CTEM): Hands-on experience establishing or significantly contributing to a CTEM or continuous vulnerability management program, including risk-based prioritization and exposure analysis using tools like Microsoft Defender, Tenable, and Prisma Cloud.
- DevSecOps & Application Security: Proven experience integrating security scanning into CI/CD pipelines (SAST, DAST, SCA, container, and IaC scanning), collaborating with developers to remediate vulnerabilities, and promoting secure coding standards.
- Cloud Security & CSPM Operations: Strong expertise in AWS and Azure security controls, paired with operational experience managing a CSPM or CNAPP platform to identify misconfigurations and secure cloud workloads.
- Operational Execution: A strong technical background in cyber defense with a clear bias toward action - designing, deploying, and executing solutions rather than just providing recommendations.
Nice-to-Haves
- Healthcare / Public Sector Experience: Prior background working within the healthcare sector or broader Ontario public sector.
- Advanced Tooling & AI: Familiarity with Microsoft Security Copilot and security automation agents for AI-assisted threat analysis and attack-path evaluation.
- Containerization & Architecture: Knowledge of Kubernetes security, microservices architecture, and modern cloud-native application practices.
- Certifications: Relevant industry credentials such as CISSP, CISM, GIAC, or Azure Security Engineer.
Note: AI-enabled tools may be used to sort applications based on job-related criteria. All AI generated results are vetted by our team and the decision of which candidates move forward is always made by a human.
