Cyber Security Specialist

Hiring: Intermediate Cyber Security Specialist in Ontario, Canada-Hybrid with Public Sector

Location: Toronto, Canada

Work Arrangement: Hybrid, with up to 3 days onsite per week

Contract Duration: Approximately 175 business days, with potential for extension

Compensation : $60.00 T4 - $70.00 INC

Start Date: November 30th, 2026

End Date: August 10th, 2027

Option to extend: additional 250 business days

About the Opportunity :

Stafingo is hiring on behalf of its client in Ontario for an Intermediate Cyber Security Specialist to support and strengthen enterprise cyber defence operations.

This hands-on role is ideal for a security professional with strong expertise in continuous threat exposure management, vulnerability management, DevSecOps, and cloud security. The successful candidate will help identify and prioritize cyber risks, integrate security controls into software delivery pipelines, and improve the security posture of cloud environments.

The position requires practical implementation experience, strong analytical skills, and the ability to collaborate with security operations, application development, DevOps, and cloud engineering teams to deliver measurable security improvements.

Key Responsibilities :

1. Continuous Threat Exposure Management

• Support the development, implementation, and ongoing improvement of a Continuous Threat Exposure Management (CTEM) program.
• Continuously assess the organization's attack surface to identify vulnerabilities, cloud misconfigurations, identity risks, and exposed assets.
• Analyze emerging threats, vulnerability disclosures, security advisories, and threat intelligence to determine potential business and technical impacts.
• Conduct attack path analysis and assess exposure exploitability to identify the most significant security risks.
• Establish risk-based remediation priorities using threat context, severity, exploitability, and business impact.
• Coordinate with security operations and vulnerability management teams to ensure identified risks are addressed effectively.
• Monitor remediation progress and validate that corrective measures have reduced or eliminated identified exposures.
• Leverage security analytics and AI-assisted security tools to improve threat analysis, exposure correlation, and investigation workflows.

2. DevSecOps and Application Security

• Integrate security controls and automated testing into CI/CD pipelines and software development workflows.
• Implement and maintain security scanning capabilities, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), infrastructure-as-code scanning, and container security assessments.
• Partner with development and DevOps teams to identify, investigate, and remediate application vulnerabilities.
• Promote secure coding practices and incorporate security considerations throughout the software development lifecycle.
• Analyze pipeline findings, identify recurring vulnerability patterns, and recommend improvements to security controls.
• Develop technical documentation, secure development guidelines, remediation procedures, and knowledge-sharing materials.
• Track security metrics and report on remediation progress, vulnerability trends, and improvements in application security.

3. Cloud Security and Posture Management

• Assess and improve security across cloud environments hosted on AWS and Microsoft Azure.
• Identify and investigate cloud security weaknesses, including excessive permissions, insecure configurations, inadequate monitoring, and exposed resources.
• Implement, configure, and maintain Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) capabilities.
• Configure security policies, detection rules, alert thresholds, and integrations to support effective monitoring and remediation.
• Apply cloud security best practices across identity and access management, network security, encryption, logging, and threat detection.
• Work with cloud engineering and IT teams to remediate security findings and reduce recurring risks.
• Develop remediation playbooks, operational runbooks, and automation scripts to support consistent responses to common cloud security issues.
• Produce assessment reports documenting findings, risk ratings, remediation recommendations, and improvements to cloud security posture.

4. Reporting, Collaboration, and Knowledge Transfer

• Prepare technical assessments, security reports, risk summaries, and management-level updates.
• Communicate security findings and remediation priorities to technical teams and business stakeholders.
• Collaborate across cybersecurity, IT operations, software development, DevOps, and cloud engineering functions.
• Maintain accurate technical documentation and operational procedures.
• Share knowledge with internal teams and support knowledge-transfer activities throughout the engagement.
• Adapt to evolving security priorities, emerging threats, and operational requirements.

Required Qualifications :

• Approximately 5–8 years of cybersecurity experience, with substantial hands-on exposure to security operations, vulnerability management, or DevSecOps.
• Demonstrated experience implementing or significantly contributing to a Continuous Threat Exposure Management (CTEM) or advanced vulnerability management program.
• Strong understanding of exposure assessment, attack path analysis, threat intelligence, exploitability analysis, and risk-based remediation prioritization.
• Hands-on experience integrating application security testing into CI/CD pipelines, including SAST, DAST, SCA, infrastructure-as-code, and container scanning.
• Experience working with development and DevOps teams to resolve security findings and improve secure software delivery practices.
• Strong practical knowledge of AWS and Microsoft Azure security controls and cloud security best practices.
• Experience operating and configuring a CSPM or CNAPP platform, such as Prisma Cloud or a comparable solution.
• Knowledge of cloud identity management, network security, encryption, logging, monitoring, and cloud threat detection capabilities.
• Experience producing technical documentation, assessment reports, remediation plans, and stakeholder communications.
• Strong analytical, troubleshooting, prioritization, and problem-solving skills.
• Ability to work independently while collaborating effectively with multidisciplinary teams.

Preferred Qualifications :

• Experience in healthcare, government, or other regulated environments.
• Exposure to threat hunting, threat intelligence analysis, or security incident investigation.
• Familiarity with Kubernetes, container security, microservices, and cloud-native application architectures.
• Relevant cybersecurity certifications, such as CISSP, CISM, GIAC, or Microsoft Azure security certifications.
• Experience with Microsoft Defender, Tenable, Prisma Cloud, AWS security services, Microsoft Sentinel, or comparable security platforms.
• Experience using AI-assisted security tools, including Microsoft Security Copilot and security automation agents.

Equipment: A client-issued laptop will be provided. Candidates working remotely must have a suitable private workspace, reliable wired internet, and an external monitor, keyboard, and mouse.

What Success Looks Like :

The successful candidate will bring a practical, delivery-focused approach to cybersecurity. They will help strengthen continuous exposure management, improve application security automation, reduce cloud security risks, and establish repeatable processes that support long-term operational resilience.

How to Apply:

Interested candidates are invited to apply to the job posting directly or submit their updated resume to harpreet@stafingo.com for immediate consideration. Please highlight relevant hands-on experience in CTEM, vulnerability management, DevSecOps, AWS and Azure security, and CSPM/CNAPP platforms.