Security & Reliability Engineer

Chair.com.pk; Toronto; Hybrid; CAD 110,000 - 170,000; Full time

Job summary

Quix is seeking a Security & Reliability Engineer in Toronto to bridge infrastructure security, application security, and operational reliability. You understand that security and reliability are properties of the same carefully engineered system and will identify risk, design controls, and implement them at every layer of the stack.

Work is calm, technical, and delivery-focused. You will help teams make durable decisions in enterprise environments where reliability and security monitoring

Qualifications

• Minimum experience in security engineering across infrastructure and applications.
• Hands-on with cloud security architecture and IAM, network segmentation, and encryption.
• Familiarity with threat modeling and security reviews.
• Proficiency with SIEM, CSPM, vulnerability scanners, and security testing tools.
• Understanding of SOC 2, ISO 27001, or equivalent.

Responsibilities

• Assess and improve security posture across cloud infrastructure, applications, and integrations.
• Design and enforce identity and access management controls and least-privilege policies.
• Perform threat modeling and security reviews for new systems and changes.
• Lead vulnerability management, triage, remediation, and disclosure processes.
• Build security monitoring, incident response, and governance documentation.

Skills

Security engineering

Infrastructure security

Application security

Cloud security

Threat modeling

SIEM

CSPM

Vulnerability scanning

Audit logging

Stakeholder communication

Tools

CI/CD security tooling

Security testing tools

Job description

Design and implement the security architecture, access controls, and reliability controls that protect enterprise platforms and their data.

Quix is looking for a Security & Reliability Engineer who can operate at the intersection of infrastructure security, application security, and operational reliability. This role is for someone who understands that security and reliability are not separate concerns — they are properties of the same well-engineered system — and who has the depth to identify risk, design controls, and implement them at every layer of the stack.

Role overview

Quix is looking for a Security & Reliability Engineer who can operate at the intersection of infrastructure security, application security, and operational reliability. This role is for someone who understands that security and reliability are not separate concerns — they are properties of the same well-engineered system — and who has the depth to identify risk, design controls, and implement them at every layer of the stack.

Work is calm, technical, and delivery-focused. You’ll help teams make durable decisions in enterprise environments where reliability and operational clarity matter.

What You’ll Do

• Assess and improve security posture across cloud infrastructure, application layers, and integration boundaries.
• Design and implement identity and access management controls: RBAC, least-privilege policies, and service account governance.
• Conduct threat modeling and security review of new systems, integrations, and architectural changes.
• Establish vulnerability management practices: scanning, triage, remediation tracking, and disclosure handling.
• Build security monitoring, alerting, and incident response capabilities aligned with enterprise operational requirements.
• Collaborate with infrastructure and engineering teams to embed security controls into deployment and delivery pipelines.
• Produce security architecture documentation, risk assessments, and compliance evidence for regulated client environments.

What We’re Looking For

• Strong experience in security engineering, infrastructure security, or application security roles.
• Deep understanding of cloud security architecture: IAM, network segmentation, encryption, secret management, and audit logging.
• Experience with threat modeling methodologies and security review processes.
• Proficiency with security tooling: SIEM, CSPM, vulnerability scanners, and application security testing tools.
• Understanding of relevant compliance frameworks: SOC 2, ISO 27001, PIPEDA, or equivalent.
• Ability to communicate security risk clearly to engineering, delivery, and executive stakeholders.

Nice to Have

• Security certifications: CISSP, CCSP, CEH, or cloud security specializations.
• Experience with DevSecOps practices and security automation in CI/CD pipelines.
• Background in penetration testing, red team exercises, or security assessment engagements.

Nice to Have

• Security certifications: CISSP, CCSP, CEH, or cloud security specializations.
• Experience with DevSecOps practices and security automation in CI/CD pipelines.
• Background in penetration testing, red team exercises, or security assessment engagements.

Security and reliability failures in enterprise environments carry significant operational, reputational, and regulatory consequences. This role reduces that risk through proactive architectural controls, systematic vulnerability management, and the operational monitoring required to detect and respond to incidents before they escape.

Submit for Security & Reliability Engineer

The role is pre-selected. Resume and mobile phone are required so the intake can support verification when connected.