Security Engineering Intern

tmx; Toronto; Hybrid; CAD 28,000 - 32,000; Full time

Job summary

TMX is seeking a Security Engineering Intern to join its Information Security team in Toronto. You will design, build, and automate security controls, taking ownership of a dedicated project that improves our security posture while collaborating with experienced engineers.

The 4-month co-op runs January 11, 2027 to April 30, 2027, with a hybrid work model (2–3 days in-office). Compensation ranges CAD 20.00–23.00 per hour, depending on knowledge and experience.

Qualifications

• Currently pursuing a Bachelor's, Master's, or equivalent degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline.
• Foundational understanding of core information security concepts (e.g., cryptography, authentication/authorization, OWASP Top 10, network protocols).
• Practical coding or scripting experience in at least one modern programming language (such as Python, Go, Java, C/C++, or JavaScript).
• Comfort and familiarity working in Unix/Linux command-line environments.
• Foundational exposure to or hands-on experience with cloud platforms (AWS, GCP, or Azure).
• Strong natural curiosity about emerging technology and security practices, paired with effective written and verbal communication skills.

Responsibilities

• Security Automation & Tooling: Develop, deploy, and maintain automated tools and scripts to streamline security workflows, vulnerability scanning, and routine security tasks.
• Security Benchmarking & Posture: Assist in evaluating application and cloud infrastructure configurations against recognized industry security standards and benchmarks (e.g., CIS, OWASP).
• Architecture & Code Reviews: Actively participate in security architecture discussions, threat modeling sessions, and code audits alongside senior engineering teammates.
• Telemetry & Detection Engineering: Analyze security telemetry and support efforts to refine detection alerts, enhance monitoring, and update incident response playbooks.
• Documentation & Presentation: Document technical findings, develop clear architectural diagrams, and present a capstone internship project to engineering leadership.

Skills

Python

Go

Java

C/C++

JavaScript

Education

Bachelor's degree in Computer Science or related

Tools

Docker

Kubernetes

GitHub Actions

GitLab CI

Job description

Venture outside the ordinary - TMX Careers

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we're connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.

Ready to be part of the action?

We are seeking a Security Engineering Intern to join our Information Security team. In this role, you will collaborate with seasoned engineers to design, build, and automate security controls, helping protect our infrastructure and applications against emerging threats. Rather than shadowing, you will take ownership of a dedicated technical project-such as building security automation, integrating testing tools into CI/CD pipelines, or enhancing detection mechanisms-leaving a tangible impact on our security posture.

Reports to: Manager, Security Engineering Job Location: Hybrid (2-3 days in office) - based in Toronto, ON.

Key Accountabilities

• Security Automation & Tooling: Develop, deploy, and maintain automated tools and scripts to streamline security workflows, vulnerability scanning, and routine security tasks.
• Security Benchmarking & Posture: Assist in evaluating application and cloud infrastructure configurations against recognized industry security standards and benchmarks (e.g., CIS, OWASP).
• Architecture & Code Reviews: Actively participate in security architecture discussions, threat modeling sessions, and code audits alongside senior engineering teammates.
• Telemetry & Detection Engineering: Analyze security telemetry and support efforts to refine detection alerts, enhance monitoring, and update incident response playbooks.
• Documentation & Presentation: Document technical findings, develop clear architectural diagrams, and present a capstone internship project to engineering leadership.

Must Have(s)

• Currently pursuing a Bachelor's, Master's, or equivalent degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline.
• Foundational understanding of core information security concepts (e.g., cryptography, authentication/authorization, OWASP Top 10, network protocols).
• Practical coding or scripting experience in at least one modern programming language (such as Python, Go, Java, C/C++, or JavaScript).
• Comfort and familiarity working in Unix/Linux command-line environments.
• Foundational exposure to or hands-on experience with cloud platforms (AWS, GCP, or Azure).
• Strong natural curiosity about emerging technology and security practices, paired with effective written and verbal communication skills.

Nice to Have(s)

• Familiarity with containerization tools (Docker, Kubernetes) and CI/CD pipeline automation (GitHub Actions, GitLab CI).
• Working knowledge of common web application vulnerabilities and practical defensive mitigation techniques.
• Demonstrated passion outside the classroom, such as security research, open-source contributions, or active membership in university cybersecurity clubs/CTF teams.

Notes:

4 month Co-op Internship: January 11, 2027 to April 30, 2027

Salary Range: $20.00/hour - $23.00/hour CAD . Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate's relevant knowledge, skills, and experience.

The recruiting efforts for this role are intended to fill a vacant position.

For this role AI-assisted tools are utilised as one input in the application and screening process. AI does not make final hiring or interview decisions.

In the market for...

• Excitement - Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success.
• Connection - With site hubs in some of the world's most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work.
• Impact - More than a platform, we use our talents to power mission-critical systems that drive global economic advancement, innovation, and growth. As well, our employee-led Team Impact spreads social good via our giving strategy.
• Wellness - From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger "we". Plus, with a cloud-first an