Security Specialist - Cyber Security
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
- Continuous Threat Exposure Management (CTEM) Experience :
- Demonstrated experience establishing or significantly contributing to a CTEM or continuous vulnerability management program.
- Hands-on experience running programs that continuously identify and mitigate security exposures, aligning closely with organizational risk tolerance.
- Perform risk-based analysis and prioritization, evaluating where to focus security resources for maximum impact and articulating the rationale to stakeholders.
- DevSecOps & Application Security Experience:
- Hands-on experience integrating security into CI/CD pipelines (implementing SAST, DAST, container security, etc.).
- Experience collaborating with development/DevOps teams to remediate security issues and improve secure coding practices.
- Familiarity with infrastructure-as-code (IaC) and managing security in containerized or cloud-native application environments.
- Cloud Security & CSPM Operations :
- Strong experience with AWS and Azure security controls and best practices.
- Proven operation of a CSPM or CNAPP platform (e.g., configuring rules, analyzing findings, managing remediation workflows).
- Ability to align cloud security initiatives with overall security program and compliance requirements.
More about this job
Responsibilities
Establish or contribute to continuous threat exposure and vulnerability management programs, prioritizing and mitigating security exposures according to organizational risk. Integrate security into CI/CD and cloud-native environments, operate CSPM or CNAPP platforms, and align cloud security initiatives with the broader security and compliance program.
Requirements
Requires hands-on experience with CTEM or continuous vulnerability management, risk-based prioritization, and integrating security into CI/CD pipelines in collaboration with development and DevOps teams. Candidates should have strong AWS and Azure security experience, CSPM or CNAPP operations experience, and familiarity with infrastructure as code and containerized or cloud-native environments.
Skills
- Vulnerability Management
- Risk-Based Analysis
- DevSecOps
- Application Security
- CI/CD Security
- SAST
- DAST
- Container Security
- Secure Coding
- Infrastructure as Code
- AWS Security
- Azure Security
- CSPM
- CNAPP
- Cloud Security
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
Keywords
- CTEM
- Security Exposures
- Risk Tolerance
- Risk-Based Prioritization
- DevSecOps
- Application Security
- CI/CD Pipelines
- SAST
- DAST
- Container Security
- Secure Coding
- Infrastructure as Code
- IaC
- Cloud-Native Applications
- AWS
- Azure
- Cloud Security Controls
- CSPM
- CNAPP
- Remediation Workflows
- Compliance