Senior Security Engineer

ZipRecruiter; Toronto; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

A leading company in the Canadian investment industry is seeking a Senior Security Engineer to maintain the security of its network and cloud infrastructure. This role involves implementing security solutions, managing compliance, and mentoring team members. The ideal candidate will have experience with security tools and a strong understanding of cloud security, alongside a commitment to collaboration and integrity.

Benefits

Employer-paid premiums for health plan

Up to $2,000 for mental health practitioners

Wellness benefit for gym memberships

RRSP matching program

$500 stipend for home office equipment

Access to LinkedIn Learning and Pluralsight

EI top-up programs for parental leave

Qualifications

• Experience with security tools for medium-sized organizations.
• Utilized cloud and container security tools.
• Designed security solutions to reduce threat exposure.

Responsibilities

• Architect and implement security solutions.
• Manage security and compliance of hybrid cloud setup.
• Respond to security incidents and zero days.

Skills

Security tools implementation

Cloud security

Threat modeling

Risk assessment

Penetration testing

Automation with Python

Education

CISSP

CCSP

GIAC Cloud security

Tools

EDR/XDR

DLP

SIEM

NGFW

IDS/IPS

SASE

WAF

Job description

Job Description

We are looking for a Senior Security Engineer who will play a critical role in maintaining the security and integrity of Fundserv’s network, cloud and system infrastructure.

Fundserv has been the indispensable hub for the Canadian investment industry for over 30 years, connecting manufacturers, distributors, intermediaries, and service providers to build solutions that simplify business interactions and promote innovation in the industry. We do this by focusing on our corporate values of Collaboration, Adaptability, Integrity, and Respect.

In this role, you will…

• Architect and implement security solutions to protect the organization against security threats that might affect the confidentiality, integrity and availability of Fundserv’s data, system and network.
• Manage security and compliance of hybrid cloud setup using CSPM, CNAPP, and other industry frameworks and standards.
• Perform threat modeling, risk assessment and Penetration test on network and infrastructure setup and collaborate with different teams to mitigate the identified threats.
• Work closely with IT and business teams to integrate security policy, procedure and best practice across all the projects, tools and technologies utilized within the organization.
• Stay up to date on the latest malicious security trends that affect the financial industry and mentor other engineers in the team by sharing knowledge.
• Automate repetitive tasks with python scripts or using other automation tools.
• Respond to security incidents and zero days by leveraging incident response tools, framework, process and procedures.

Why you are the person we’re looking for…

You’ve demonstrated the ability to do the following, gained through education and/or experience:

• Implementation of security tools and technologies like EDR/XDR, DLP, database logging & monitoring, and SIEM for a medium sized organization.
• Utilized cloud and container security tools to improve the security posture of an organization's hybrid cloud setup.
• Designed and architected a security solution to reduce the threat exposure of an application or tool.
• Configure and manage networking tools and technologies like NGFW, IDS/IPS, SASE and WAF, preferably Cisco and Fortinet products.
• Collaborate with stakeholders on multiple levels to advocate for security change across the organization.
• Perform vulnerability management, threat modelling, risk assessment and penetration test on network, infrastructure or application environments.
• Explain, present, demonstrate, and document the impact of vulnerabilities or security loopholes on an organization level.
• Facilitate remediation of the identified security gaps by providing sufficient details on existing mitigation and proposing solutions.

The following is not required but will be a bonus:

• CISSP, CCSP, GIAC Cloud security, architecture and design.

We recognize that there are different paths to gaining skills, so if you have diverse experience which doesn’t match the criteria exactly but you think you would be great in this role, we invite you to apply!

Why Work Here

Our Benefits and Perks

We’ve consistently been recognized as a GTA Top Employer and a Canada Top Small & Medium Employer. Below are some of the reasons why:

• Employer-paid premiums for group health plan, including a Healthcare Spending Account
• Up to $2,000 per year for mental health practitioners and corporate-wide mental health days per year
• Wellness benefit for gym memberships, workout equipment, meditation and wellness apps, and more!
• RRSP matching program
• $500 one-time stipend for home office equipment and monthly home-internet subsidy
• Out of Province policy offers up to 20 days of out-of-province work per calendar year for employees with 2+ years of service
• Access to tools like LinkedIn Learning and Pluralsight and additional training opportunities
• EI top-up programs for maternity and parental leave, family medical, and family caregiver leave

Our Hybrid Work Policy

We recognize the importance of flexibility and work-life balance, and as such our hybrid model is purpose-led – we come in for a reason, not to fill a quota.