Senior Security Engineer

Dye & Durham Corporation; Toronto; On-site; CAD 126,000 - 154,000; Full time

Benefits offered by this job

Healthcare

Pension

Training opportunities

Volunteer days

Job summary

Dye & Durham Corporation is seeking a Senior Security Engineer to advance and protect the organization across cloud and on‑premises environments. You will design, implement, and continually improve cybersecurity controls, threat detection, vulnerability management, and incident response capabilities.

Lead security automation, risk reduction, and regulatory compliance initiatives while mentoring staff and partnering across time zones to shape the security roadmap for the business.

Qualifications

• 7+ years of cybersecurity experience with increasing responsibility.
• Professional security certifications preferred (CDSA, SAL1, CEH, OSCP, GCIA or equivalent).
• Experience with automation, scripting, and APIs (Python/PowerShell/Bash).
• Knowledge of NIST CSF, SOC 2, ISO 27001, and GDPR.
• Strong communication and stakeholder management skills.

Responsibilities

• Lead vulnerability management activities with scanning, remediation tracking, and reporting.
• Develop and implement security automation to improve operations.
• Monitor and optimize EDR, firewalls, IDS/IPS, DLP, cloud and email protection.
• Maintain and enhance incident response plans and playbooks.
• Coordinate security incident investigations with stakeholders and partners.
• Contribute to detection engineering and log correlation improvements.
• Conduct security risk assessments and provide mitigation recommendations.
• Collaborate with DevOps to embed security into CI/CD pipelines.
• Support audits, policy development, and regulatory compliance.
• Contribute to cybersecurity strategy and roadmap.

Skills

Threat detection

Incident response

Cybersecurity experience

Automation scripting

Python

PowerShell

Bash

Communication skills

Tools

EDR tools

Firewalls

IDS/IPS

DLP

Cloud security platforms

Email security

Job description

The Senior Security Engineer is responsible for advancing and protecting the organization's security posture through the design, implementation, and continuous improvement of cybersecurity controls, threat detection capabilities, vulnerability management programs, and incident response processes. This role combines technical security engineering expertise with operational oversight, driving security automation, improving detection and response effectiveness, and supporting compliance initiatives across cloud and on-premises environments. The position plays a critical role in reducing organizational risk, strengthening cyber resilience, supporting strategic security initiatives, and ensuring the business can operate securely and effectively.

Key Responsibilities

• Lead and mature enterprise vulnerability management activities, including scanning, prioritization, remediation tracking, and reporting.
• Develop and implement security automation to improve operational efficiency, detection capabilities, and reporting processes.
• Monitor, manage, and optimize security technologies including EDR, firewalls, IDS/IPS, DLP, cloud security, and email protection platforms.
• Maintain and enhance incident response plans, playbooks, escalation procedures, and communication protocols.
• Coordinate and support security incident investigations with internal stakeholders and external partners.
• Contribute to detection engineering, log correlation, monitoring improvements, and security control optimization.
• Conduct security risk assessments and provide recommendations to mitigate identified risks.
• Evaluate, implement, and integrate new security tools and technologies to enhance protection and visibility.
• Partner with infrastructure and DevOps teams to embed security into system architecture, cloud environments, and CI/CD pipelines.
• Support security compliance initiatives, audits, policy development, and adherence to industry standards and regulatory requirements.
• Contribute to the execution of the cybersecurity strategy and roadmap, supporting the organization's long-term security objectives.
• Provide mentorship, guidance, and knowledge sharing to security team members and key stakeholders.

Skills, Knowledge and Expertise

• 7+ years of cybersecurity experience with progressively increasing responsibility.
• Professional security certifications such as CDSA, SAL1, CEH, OSCP, GCIA, or equivalent are preferred.
• Experience with automation, scripting, and API integrations using technologies such as Python, PowerShell, or Bash.
• Strong knowledge of cybersecurity technologies, frameworks, protocols, and best practices.
• Experience with endpoint security, cloud security, vulnerability management, web application security, data loss prevention, and email security solutions.
• Strong understanding of threat detection, incident response, and security operations.
• Experience conducting security risk assessments and supporting audit and compliance activities.
• Knowledge of security standards and frameworks such as NIST CSF, SOC 2, ISO 27001, and GDPR.
• Strong analytical, problem-solving, and troubleshooting skills.
• Excellent communication and stakeholder management skills.
• Ability to work effectively in a fast-paced, dynamic environment and collaborate across multiple time zones.
• Demonstrated ability to mentor, influence, and collaborate with technical and business teams.

Benefits

At Dye & Durham we strive to be visionaries! As a leader in our field, we ensure our employees are ready for the next challenge in their journey with us by offering internal and external training opportunities. We offer competitive salaries and a whole host of benefits including healthcare, pension, company discounts, wellness programs, and paid days off to move house or volunteer for your favourite charity.

In line with the amended Employment Standards Act 2000, the salary range for this role is: $140K,dependent on assessment of skills during the interview processes.