Security Engineering Intern: Build Automated Defenses

TMX Group; Toronto; Hybrid; CAD 28,000 - 32,000; Full time

Benefits offered by this job

Accommodations for applicants

Co-op internship

Job summary

TMX Group is seeking a Security Engineering Intern to join our Information Security team in Toronto. You’ll collaborate with seasoned engineers to design, build, and automate security controls, taking ownership of a capstone project and delivering tangible impact.

The role is hybrid (2–3 days in-office). You’re pursuing a Bachelor’s/Master’s in CS, Cybersecurity or related field, with scripting in Python/Go/Java and basic cloud knowledge.

Qualifications

• Pursuing a Bachelor's or Master’s in CS, Cybersecurity, Information Systems, or related field.
• Foundational knowledge of security concepts (cryptography, authz, OWASP Top 10, networking).
• Experience with at least one modern language (Python, Go, Java, C/C++, JavaScript).
• Comfort with Unix/Linux CLI and basic cloud exposure (AWS, GCP, Azure).
• Strong written and verbal communication and curiosity about tech trends.

Responsibilities

• Security automation, tooling development, and scripting to streamline security work.
• Assist in benchmarking configurations against CIS/OWASP standards.
• Participate in architecture discussions, threat modeling, and code reviews.
• Analyze telemetry, improve detection alerts, and support incident response playbooks.
• Document findings and present a capstone project to engineering leadership.

Skills

Programming languages

Unix/Linux

Cloud platforms

Security fundamentals

Communication skills

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Systems

Tools

Docker

Kubernetes

CI/CD tooling

GitHub Actions

Job description

TMX Group is seeking a Security Engineering Intern to join our Information Security team in Toronto. You’ll collaborate with seasoned engineers to design, build, and automate security controls, taking ownership of a capstone project and delivering tangible impact.

The role is hybrid (2–3 days in-office). You’re pursuing a Bachelor’s/Master’s in CS, Cybersecurity or related field, with scripting in Python/Go/Java and basic cloud knowledge.