Position: Senior Security Engineer
Location: Toronto, ON
Salary Range: $125K-$135K plus bonus and other perks
Work Model: Hybrid, approximately 1–2 days onsite per week
Employment Type: Permanent, full-time
Posting Type: Open vacancy
We’re partnering with an established Canadian financial technology organization to hire a Senior Security Engineer. This is a hands-on individual contributor role for someone who enjoys working broadly across security rather than being limited to one specialized area. You’ll act as a trusted security partner across infrastructure, cloud, database, architecture, DevOps and emerging technology initiatives. The focus is on reviewing technical designs, identifying risks, recommending practical controls and helping teams build security into projects from the outset.
What you’ll do:
- Conduct security architecture reviews and threat modelling for new and existing systems.
- Serve as the security resource on strategic and tactical technology projects.
- Partner with infrastructure, network, database, architecture, DevOps and application teams.
- Assess security risks and recommend practical, proportionate controls.
- Support security initiatives across cloud, containers, databases, networks, IAM and secrets management.
- Review and strengthen security policies, procedures, standards and technical documentation.
- Provide technical guidance to security operations teams and external security partners when required.
- Help establish security guardrails for the responsible use of third-party AI tools and emerging technologies.
- Contribute to security incident exercises and provide technical guidance during escalated incidents.
- Mentor engineers and technical administrators while promoting security best practices across the organization.
What we’re looking for:
- Approximately 6–8+ years of progressive experience in security engineering, infrastructure security or a related area, who have taken meaningful ownership of projects and worked across several areas of an organization.
- Broad hands-on experience across multiple security domains, such as cloud, network, database, container or identity security.
- Experience conducting security architecture assessments, design reviews or threat-modelling exercises.
- Demonstrated ownership of cross-functional security projects involving multiple technical teams.
- Experience securing at least one major cloud platform: Azure, AWS or GCP.
- Working knowledge of network security concepts, including firewalls, segmentation, load balancers, SASE or ZTNA.
- Exposure to database security, encryption, access controls and secrets management.
- Knowledge of IAM concepts, including SSO, federation and privileged access management.
- Strong communication skills with the ability to explain security risks and influence both technical and non-technical stakeholders.
- Ability to automate security or operational tasks using Python or Bash.
Nice to have:
- Experience with Azure security.
- Familiarity with CSPM, CNAPP or cloud workload protection platforms.
- Experience with Kubernetes or other container platforms, including image security, RBAC and software supply-chain security.
- Exposure to Oracle database security or comparable database-security platforms.
- Understanding of LLM-specific risks, AI governance, MCP servers or security controls for third-party AI tools.
- Experience with penetration testing, purple teaming or incident simulations.
- CISSP, CCSP, OSCP, cloud-security or other relevant certifications.
- Experience working within financial services or another regulated environment.
Interested? If you’re a hands-on security professional who enjoys solving varied problems, partnering across technical teams and improving security at both the design and implementation levels, we’d be happy to connect. Please share your updated resume with Neeta Bernard at neeta.bernard@quantum-qtr.com.
REFER A NEW HIRE AND EARN A CASH BONUS! For details, click here.
All applications are reviewed by our recruitment team, and hiring decisions are made by people. We may also use AI-enabled tools to support parts of the application review process.
