Security Engineer - 6-Month Contract (Hybrid)

Central 1 Credit Union; Toronto; Hybrid; CAD 125,000 - 150,000; Full time

Job summary

A prominent financial services provider in Toronto seeks a Senior Security Engineer to enhance security practices. You will lead project teams in threat assessments, implement security controls, and support secure development. Ideal candidates have over 10 years in IT, with strong communication skills and expertise in cloud security. Competitive hourly rate and hybrid work flexibility offered.

Benefits

Work-life flexibility

Hybrid work environment

Career development opportunities

Wellness Flex Fund

Qualifications

• 10+ years in IT, with 5+ in security and 2+ in architecture.
• Certifications preferred: CISSP, GSEC, GWAPT, GPEN, Azure/AWS Security.

Responsibilities

• Lead threat modeling and risk assessments.
• Conduct vulnerability assessments and penetration testing.
• Support secure development in Agile workflows.

Skills

Network protocols (IP, TCP/IP, TLS/mTLS)

OWASP Top 10

Cloud security (AWS, Azure, Cloudflare)

Analytical thinking

Strong communication

Education

Bachelor’s degree in a related field

Tools

SAST

DAST

Python

Bash

Job description

Central 1 cooperatively empowers credit unions and other financial institutions to deliver banking choice to Canadians. Central 1 provides critical services at scale to enable a thriving credit union system. We do this by collaborating with our clients, developing strategies, products and services to support the financial well-being of their more than 5 million diverse customers in communities across Canada. For more information, visit www.central1.com.

What we offer:

• Work-life flexibility
• Hybrid workenvironment
• One time allowance to set up your office for remote first employees
• Variable annual incentive plan
• Generous annual vacation allotment
• Top-notch flexible benefits planincluding family building and gender affirmation
• Retirement Plan, matched contributions at 6%
• Access toa learning platform and educational assistancesupport
• Access to a virtual wellness platform
• Career development opportunities
• Wellness Flex Fund to support personal interest and activities
• Day off to volunteer in your community andother paid time off options
• Corporate discounts

*subject to employment agreement

Job Summary:

We’re looking for a senior contract Security Engineer to lead secure design, implementation, and operations across the organization. You’ll work closely with cross-functional teams to embed information security best practices into projects and products, helping us stay ahead of evolving threats.

You’ll stay current on emerging technologies and risks, translating complex concepts into practical, actionable guidance. Project teams will rely on your analytical skills and collaborative approach to identify and prioritize threats, as well as guide the development of effective controls.

Experience in Agile environments and integrating security into modern toolsets is essential, along with the ability to engage diverse technical and non-technical audiences with clarity and influence.

What you’ll be doing

Advisory & Architecture

• Act as a subject matter expert on security in project teams

• Lead threat modeling and risk assessments at product/project levels

• Define and support the implementation of security controls

• Help shape enterprise security architecture, standards, and policies
  

Implementation & Integration

• Evaluate and integrate new security tools and technologies

• Build automation into security processes

• Support secure development and deployment in Agile workflows
  

Operations & Testing

• Conduct vulnerability assessments and penetration testing

• Investigate incidents and validate security fixes

• Review system designs and recommend improvements

• Maintain awareness of industry threats, trends, and best practices

What you'll have

Education & Experience

• 10+ years in IT, with 5+ in security and 2+ in architecture

• Bachelor’s degree in a related field

• Certifications preferred: CISSP, GSEC, GWAPT, GPEN, Azure/AWS Security
  

Technical Skills

• Strong understanding of network protocols (IP, TCP/IP, TLS/mTLS), OWASP Top 10, SANS Top 25

• Familiar with security frameworks (ISO 27001, NIST CSF)

• Experience with:

  • Cloud security (AWS, Azure, Cloudflare, WAFs)

  • SAST, DAST, PKI, and application security tools

  • Scripting languages (Bash, Python, Perl)

  • Threat modeling (e.g., STRIDE)

  • Web technologies (HTTP/2, Web Proxy)

  • Linux and macOS

Soft Skills

• Strong communicator and collaborator

• Analytical thinker and effective problem solver

• Self-starter with excellent time management

• Able to coach and influence across teams

Hourly Rate: $80.00 - $90.00/hour

The hourly rate representsthe job rate determined for the successful candidate who is fully competent in the role. The actual salary will vary depending on market conditions and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training.

#LI-Hybrid

Central 1 is an equal opportunity employer and committed to building an inclusive workforce by creating an environment where everyone feels like they belong and has the opportunity to be successful. We welcome all applicants to join our diverse workforce and we will provide an accessible candidate experience including, but not limited to accommodations to interview sites and alternate formats upon request to our Recruitment team.