Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 2 months ago
AI & Agentic Engineer, Senior
Welcome to the Jungle
Montreal, QC
…or OpenAI (Responses API, AgentKit) - and working experience with one cloud platform (GCP, Azure, or…
Added 2 months ago
TR
Lead Cloud Platform Engineer, Azure
Thomson Reuters
Toronto, ON · Canada, Toronto, Ontario
- Full-time
This is a hands-on senior individual contributor position with broad technical authority. You will write Bicep, operate and improve our AKS footprint, review other people’s infrastructure…
Added 3 months ago
C
Senior Platform Engineering Specialist
CGI
Toronto, ON
- Full-time
CGI is seeking an experienced Senior Platform Engineering Specialist to join our growing Platform Engineering consulting practice within the Emerging Technologies team.
Added 3 months ago
C
Senior Data Platform Engineering Specialist
CGI
Toronto, ON
- Full-time
CGI is seeking an experienced Senior Data Platform Engineering Specialist to join our growing Data Platform Engineering consulting practice within the Emerging Technologies team.
Added 3 months ago
C
Senior Full Stack Developer
CGI
Toronto, ON
- Full-time
CGI is seeking an experienced Senior Full Stack Developer to join our growing Software Engineering Practice within the Emerging Technologies team.
Added 3 months ago
T
Senior/Staff Software Engineer, Data Platform
Terminal
Toronto, ON
- $200,000 to $295,000 CAD / year
- Full-time
…together in person in Toronto, combining early-stage speed with late-stage maturity while processing many terabytes of vehicle data every…
Added 3 months ago
PE
Senior Embedded Build, Release & Integration Developer
Paradigm Electronics Inc.
Ottawa, ON
- $120,000 to $150,000 CAD / year
- Full-time
Position Title: Senior Embedded Build, Release & Integration Developer
Added 3 months ago
C
Senior Software Engineer
Clutch
Toronto, ON
- $160,000 to $200,000 CAD / year
- Full-time
Our team builds with technologies like TypeScript, React, Express, PostgreSQL, and AWS, but we're far more interested in exceptional engineers than perfect technology matches. If you've…
Added 3 months ago
F
Senior Security Engineer
Forma.ai
Toronto, ON
- $160,000 to $190,000 CAD / year
- Full-time
Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries.
Added 3 months ago
A
Manager, Software Development
AlayaCare
Montreal, QC · Greater Montreal Metropolitan Area
- Full-time
With 550+ employees across Canada, the US, Australia, and Brazil, we're united by a shared mission and a strong culture of transparency, growth, and human connection. Whether you're early…
Added 3 months ago
F
Senior Security Engineer
Forma.ai
Toronto, ON
- Full-time
Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries.
Added 3 months ago
WT
Senior Software Developer, LLM Infrastructure
Wealthsimple Technologies
Remote, Canada
- $152,900 to $189,000 CAD / year
- Full-time
- Remote
As a Senior Software Engineer on the ML Infrastructure team, you will design and implement the core backend and infrastructure powering our AI systems. You will work closely with data…
Added 2 months ago
CI
Director of Business Intelligence & Analytics (Permanent)
CoreFactor Inc.
Toronto, ON
- Full-time
Proficiency in data visualization tools (e.g., Tableau, Power BI), statistical software (e.g., Python), and CRM platforms (e.g., Salesforce); with a strong working knowledge and…
Added 2 months ago
BC
Sr. Site Reliability Engineer
Blackpoint Cyber
Remote, Canada
- $155,000 to $185,000 CAD / year
- Full-time
- Remote
We're hiring a Senior Site Reliability Engineer to design, implement, and maintain our cloud and on-premise infrastructure and CI/CD pipelines, with a focus on automation, scalability, and…
Added 3 months ago
E
Senior DevOps Engineer
e-STORAGE
Kitchener, ON
- Full-time
Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud).
Added 3 months ago
C
Senior Backend Developer - ML Platform
Coveo
Montreal, QC · Greater Montreal Metropolitan Area
- Full-time
5+ years of experience in backend development in a cloud environment (Python or Java/Spring preferred, AWS an asset)
Added 2 months ago
SD
DevOps Engineer - Senior
Symbiotic Digital
ON · Downtown Toronto (CN Tower / King and Spadina / Railway Lands / Harbourfront West / Bathurst Quay / South Niagara / YTZ), Ontario
- Contract
of 3 days per week onsite in Toronto, Ontario
Added 2 months ago
S
Senior Ethical Hacker
Stantec
Toronto, ON
- Full-time
The Senior Ethical Hacker will conduct security assessments on web applications and cloud services by emulating real-world attacks using the Mitre Attack Framework. Their goal is to…
Added 3 months ago
E
Senior SDET (IC4) - Senior Software Engineer in Test
Emburse
Toronto, ON
- Full-time
Emburse is seeking a skilled and detail-oriented Senior Software Development Engineer in Test (SDET) to join our engineering team. In this role, you will bridge the gap between software…
Added 3 months ago
HT
Lead AI Test Automation Architect
High Tech Genesis
Canada
- Contract
Seeking a Lead AI Test Automation Architect / Senior SDET to design and lead AI-powered Quality Engineering and test automation solutions. The role requires strong automation architecture,…
Added 2 months ago
FF
Manager, Security Operations
Forward Financing
Remote, Canada
- $172,000 to $237,000 CAD / year
- Full-time
- Remote
…high-quality security engineers. You will collaborate closely with cross-functional technical teams, AppSec, and executive stakeholders to advance our AI security strategy and build robust…
Added 3 months ago
QI
Intermediate Software Developer
Quarterhill Inc.
Saskatoon, SK
- Full-time
The Intermediate Software Developer will be responsible for designing, developing, and maintaining software applications. This role involves working closely with senior developers,…
Added 2 months ago
M
Senior IT Analyst
MNA
Edmonton, AB
- Full-time
The Otipemisiwak Métis Government is recruiting for a full-time Senior IT Analyst to join the Facilities and Building Operations Team. Reporting to the IT Manager, the Senior IT Analyst…
Added 2 months ago
Senior Director, Engineering - Corporates, Financial Institutions & Sovereigns
Fitch Group
Toronto, ON
Full-stack engineering expertise - proven background with modern enterprise technology stacks, including React, Java, and/or Python in production environments, deployed across AWS and/or…
Added 3 months ago
C
Senior Software Engineer
Clutch
Toronto, ON
- $160,000 to $200,000 CAD / year
- Full-time
Our team builds with technologies like TypeScript, React, Express, PostgreSQL, and AWS, but we're far more interested in exceptional engineers than perfect technology matches. If you've…

Forma.ai

Senior Security Engineer

Toronto, ON, Canada

$160,000 to $190,000 CAD / year · Full-time

Apply on wellfound.com About employer

Applications open in a new tab.

Job details

Pay: $160,000 to $190,000 CAD / year
Job type: Full-time
Posting language: English
Posted: Aug 11, 2026

Original job description

The Opportunity As a Senior Security Engineer, you will be a hands-on technical leader strengthening security across Forma's application, cloud infrastructure, development lifecycle, internal systems, and incident-response practices. Security today is shared across Engineering and DevOps. You'll work closely with both teams and have real room to shape how Forma approaches security as we grow. Depending on your interests and the needs of the business, the role could develop into a deeper individual-contributor position or help build a dedicated security team. You'll work directly with Engineering, DevOps, IT, Product, Legal, and Privacy to identify risks, design practical controls, automate security processes, and help teams ship secure and reliable software. What you'll doCloud and infrastructure security Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries. Embed security requirements into Terraform and other Infrastructure as Code, and improve secrets, certificate, encryption-key, and credential management. Build automated checks for insecure configurations, excessive permissions, exposed resources, and configuration drift across Kubernetes, containers, serverless workloads, networking, and data services. Application, data, and AI security Run threat modelling and security architecture reviews for new products, services, APIs, data pipelines, and third-party integrations. Strengthen tenant isolation, authorization enforcement, and fine-grained data access controls at the schema, table, row, and column level. Help protect sensitive compensation, financial, customer, and employee data across databases, data warehouses, S3, analytics services, and internal tools, including logging and auditability for sensitive-data access. Review AI and agentic workflows for data leakage, prompt injection, insecure tool use, and excessive permissions; ensure agents operate strictly within the calling user's permissions; and define secure patterns for approved services such as Amazon Bedrock. Identify and help remediate application vulnerabilities, and build tooling and reusable libraries that make the secure path the easy one for engineers. DevSecOps and secure delivery Embed security testing into CI/CD - static analysis, dependency and container scanning, secrets detection, Infrastructure as Code scanning, and dynamic testing - without creating unnecessary friction for developers. Define practical vulnerability-severity, remediation, exception, and escalation standards, and partner with developers to separate real risk from noise and fix root causes. Improve software supply-chain security, including build permissions, artifact integrity, dependency governance, and GitHub administration. Detection, monitoring, and incident response Improve security visibility across cloud infrastructure, applications, identities, endpoints, and SaaS systems, and build alerts and detection logic that are worth acting on. Lead investigations and coordinate containment, remediation, and root-cause analysis, supported by clear runbooks, ownership, and escalation paths. Run tabletop exercises, and track and communicate security metrics and material risks to technical and business stakeholders. Identity, governance, and enablement Strengthen SSO, MFA, privileged access, and onboarding, offboarding, and access-review processes across AWS, GitHub, Microsoft 365, Entra ID, production systems, and internal SaaS - automating provisioning, entitlement reviews, and evidence collection where practical. Translate security and compliance requirements into concrete technical controls, and support customer security reviews, audits, and programs such as SOC 2 and ISO 27001. Evaluate third-party tools and integrations for security, privacy, and access-control risk, and help select, consolidate, and rationalize Forma's security tooling for both coverage and cost. Maintain clear technical standards and provide practical guidance, training, and mentorship that raises security capability across Engineering. What we're looking for Six or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering. Strong hands-on experience securing AWS environments, including IAM, networking, encryption, logging, and secrets management. Experience with Terraform, Kubernetes, containers, and security controls in CI/CD pipelines. Strong understanding of application and API security, authentication, authorization, and multi-tenant SaaS risks. Experience with vulnerability management, threat modelling, incident response, and security automation. Ability to write scripts using Python, Bash, PowerShell, or a similar language. Strong communication, troubleshooting, and cross-functional collaboration skills. Strongly preferred Experience supporting SOC 2, ISO 27001, privacy programs, or enterprise customer security reviews. Nice to have Experience securing analytics platforms, data pipelines, or systems handling sensitive customer data, including row-level, column-level, or attribute-based access controls. Experience with AWS security services, EKS, Datadog, Wiz, Snyk, CrowdStrike, or similar tools. Experience securing AI applications, large language models, agents, or Amazon Bedrock workloads. Experience in a B2B SaaS or high-growth technology company. Relevant security or cloud certifications. Your first 30, 60, and 90 daysFirst 30 days: learn and assess Build an understanding of Forma's application architecture, AWS environments, deployment processes, data flows, identity systems, and security obligations. Meet key partners across Engineering, DevOps, IT, Product, Legal, and Privacy, and agree on how security reviews and escalations will operate. Review existing controls, open findings, incidents, access patterns, monitoring, and compliance commitments. Identify immediate risks, quick wins, and areas needing deeper assessment. By 60 days: prioritize and improve Deliver a prioritized security roadmap based on risk, business impact, and engineering effort. Begin addressing the highest-priority gaps in cloud access, secrets management, CI/CD security, vulnerability management, and monitoring. Introduce or improve a consistent process for threat modelling and security architecture reviews, and define vulnerability-severity, ownership, remediation, and exception standards. Assess the current security tool stack for coverage, overlap, and cost, with consolidation recommendations. Improve incident-response runbooks, alert ownership, and escalation paths for critical systems, and recommend measurable security objectives and reporting metrics. By 90 days: operationalize and lead The expectation here is momentum, not completion - these should be underway and demonstrably working, not finished. A first set of automated security guardrails in place across AWS, Terraform, Kubernetes, GitHub, or CI/CD, with remaining coverage planned and underway. Repeatable processes running for vulnerability management, access reviews, security assessments, and incident follow-up, even if still being refined. Security reviews completed for the highest-priority product, data, or AI initiatives, with required controls agreed and in progress. Improved visibility into high-risk identities, infrastructure changes, and sensitive-data access. Progress, key risks, and the next phase of the security roadmap presented to leadership. Additional Info: This position is for an existing vacancy Salary range: 160-190K

Apply on wellfound.com About employer

More about this job

Responsibilities

Lead the design and implementation of security controls across AWS environments, application architectures, and CI/CD pipelines. Coordinate incident response, threat modelling, and compliance efforts to protect sensitive data and ensure secure software delivery.

Requirements

Requires six or more years of experience in security or infrastructure engineering with strong hands-on expertise in AWS, Terraform, and Kubernetes. Must be proficient in scripting languages like Python or Bash and have a deep understanding of multi-tenant SaaS risks.

Skills

Aws Security
Iam
Terraform
Kubernetes
DevSecOps
Application Security
Threat Modelling
Incident Response
Python
Bash
Soc 2
Iso 27001
Ci/Cd Security
Vulnerability Management
Network Security
Cloud Infrastructure

Visa sponsorship

Not detected in the job text

Keywords

Aws
Iam
Terraform
Kubernetes
Containers
Serverless
Bedrock
Snyk
Wiz
CrowdStrike
Datadog
Soc 2
Iso 27001
DevSecOps
Python
Bash
PowerShell
SaaS
Threat Modelling
Incident Response
CI/CD
GitHub
Entra Id
Microsoft 365
Encryption
Least-Privilege
API Security
Vulnerability Management
Infrastructure as Code
Cloud Security

Report this job

Work requirements

Jobs in Canada