Security Engineer

Magnum Hunt; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

A leading technology company in Toronto is searching for a seasoned security specialist to oversee software development and SaaS hosting security practices. This role requires a strong emphasis on PCI-DSS compliance, team training, and leadership on IT security initiatives. The ideal candidate will have 10+ years of development experience coupled with a solid security focus in enterprise environments. Opportunities for growth and impact within a supportive team await.

Qualifications

• CISSP designation or equivalent preferred.
• Extensive experience in leading architecture designs focusing on security.
• Proven ability to meet deadlines and work effectively with minimal supervision.

Responsibilities

• Ownership of software development security practices.
• Training / Mentoring staff on security best practices.
• Maintain documentation and manage periodic vulnerability scans.
• Participate in project planning and process improvements.

Skills

University degree in Computer Science or related field

CISSP designation or equivalent preferred

Strong understanding of PCI-DSS, PA-DSS, and SSAE / SOC compliance

Strong knowledge of OWASP Top-10 and protective coding practices

10+ years development experience

5+ years security focus

Experience with Windows Server platform (IIS, Active Directory, Exchange)

Experience with Virtualized environments and management best practices

Strong analytical and problem solving skills

Strong leadership, interpersonal and communication skills

Education

University degree in Computer Science or related field

Tools

Amazon EC2

ESX-VMware

Job description

Skills & Qualifications

• University degree in Computer Science or related field
• CISSP designation or equivalent preferred
• Strong understanding of PCI-DSS, PA-DSS, and SSAE / SOC compliance
• Strong knowledge of OWASP Top-10 and protective coding practices.
• 10+ years development experience
• 5+ years security focus
• Experience working with the Windows Server platform (IIS, Active Directory, Exchange)
• Extensive experience in leading architecture designs, and solutions focusing on security.
• Demonstrate the ability to manage and prioritize multiple projects
• Experience with Virtualized environments and management best practices : experience in Amazon EC2 and ESX-VMware required
• Experience with the deployment of enterprise web-based transactional applications
• Proven ability to meet deadlines, prioritize tasks and work effectively with minimal supervision in a team environment
• Strong analytical and problem solving skills
• Strong leadership, interpersonal and communication skills (verbal and written with both technical and non-technical staff)
• Motivated, hardworking and flexible
• Quick learner who enjoys a challenge and can see the big picture

Responsibilities

• Ownership of software development security practices
• Ownership of SaaS hosting security practices
• Compliance owner for PCI-DSS, PA-DSS certifications
• Training / Mentoring staff on Security best practices
• Governance role as company security officer.
• IT security lead
• Ensure communications traversing internal and public networks follow best practices to maintain network security
• Maintain documentation, establish and manage periodic vulnerability scans, maintain audit readiness and provide audit documents for compliance programs (e.g. PCI) as required
• Implement and perform network and instance monitoring for security events and follow appropriate remediation tasks in the case of an identified fault.
• Participate in the project planning process including estimating and process improvements;
• Evaluate new technologies and evaluating how they could be integrated / utilized to better serve our clients (internal and external)
• Strive at all times to do work using best practices – through experience or experimentation