Cyber Security Specialist

Job Title: Security Specialist - Intermediate (Cyber Security)

Location: Toronto (Hybrid - up to 3 days onsite per week)

Contract Duration: 10 months

Pay rate: $60-65 based on experience

We are looking for a hands-on intermediate Security Specialist. In this operational role, you will focus on two core pillars: designing and maturing a Continuous Threat Exposure Management (CTEM) program, and driving DevSecOps pipeline security alongside Cloud Security Posture Management (CSPM/CNAPP) across AWS and Azure environments. If you excel at turning security insights into concrete technical solutions and working collaboratively across cross-functional teams, we want to hear from you!

Must-Haves

• Continuous Threat Exposure Management (CTEM): Hands-on experience establishing or significantly contributing to a CTEM or continuous vulnerability management program, including risk-based prioritization and exposure analysis using tools like Microsoft Defender, Tenable, and Prisma Cloud.
• DevSecOps & Application Security: Proven experience integrating security scanning into CI/CD pipelines (SAST, DAST, SCA, container, and IaC scanning), collaborating with developers to remediate vulnerabilities, and promoting secure coding standards.
• Cloud Security & CSPM Operations: Strong expertise in AWS and Azure security controls, paired with operational experience managing a CSPM or CNAPP platform to identify misconfigurations and secure cloud workloads.
• Operational Execution: A strong technical background in cyber defense with a clear bias toward action - designing, deploying, and executing solutions rather than just providing recommendations.

Nice-to-Haves

• Healthcare / Public Sector Experience: Prior background working within the healthcare sector or broader Ontario public sector.
• Advanced Tooling & AI: Familiarity with Microsoft Security Copilot and security automation agents for AI-assisted threat analysis and attack-path evaluation.
• Containerization & Architecture: Knowledge of Kubernetes security, microservices architecture, and modern cloud-native application practices.
• Certifications: Relevant industry credentials such as CISSP, CISM, GIAC, or Azure Security Engineer.

Note: AI-enabled tools may be used to sort applications based on job-related criteria. All AI generated results are vetted by our team and the decision of which candidates move forward is always made by a human.