Senior Security Engineer

Quantum Technology Recruiting Inc. (QTR); Toronto; Hybrid; CAD 125,000 - 135,000; Full time

Job summary

Quantum Technology Recruiting Inc. (QTR) is partnering with a Canadian fintech to hire a Senior Security Engineer in Toronto, ON.

This hands-on role spans security across infrastructure, cloud, databases, architecture, DevOps and emerging tech, focusing on design reviews, risk identification and early security integration. You will review technical designs, provide guidance, and mentor engineers while promoting security best practices across the organization in a hybrid work setting with some

Qualifications

• Hands-on security engineering across multiple domains.
• Ability to review designs and model threats.
• Ability to automate security tasks with scripting.

Responsibilities

• Conduct security architecture reviews and threat modelling for systems.
• Serve as security resource on strategic projects and mentor engineers.
• Partner with infrastructure, DevOps, and application teams to implement controls.
• Assess risks and propose practical, proportionate controls.
• Support security initiatives across cloud, containers, IAM, and secrets management.

Skills

Security engineering

Cloud security

Threat modelling

Python or Bash

Communication

Tools

Cloud platforms (Azure/AWS/GCP)

Container security

Job description

Position: Senior Security Engineer

Location: Toronto, ON

Salary Range: $125K-$135K plus bonus and other perks

Work Model: Hybrid, approximately 1-2 days onsite per week

Employment Type: Permanent, full-time

Posting Type: Open vacancy

We're partnering with an established Canadian financial technology organization to hire a Senior Security Engineer. This is a hands-on individual contributor role for someone who enjoys working broadly across security rather than being limited to one specialized area. You'll act as a trusted security partner across infrastructure, cloud, database, architecture, DevOps and emerging technology initiatives. The focus is on reviewing technical designs, identifying risks, recommending practical controls and helping teams build security into projects from the outset.

What you'll do:

• Conduct security architecture reviews and threat modelling for new and existing systems.
• Serve as the security resource on strategic and tactical technology projects.
• Partner with infrastructure, network, database, architecture, DevOps and application teams.
• Assess security risks and recommend practical, proportionate controls.
• Support security initiatives across cloud, containers, databases, networks, IAM and secrets management.
• Review and strengthen security policies, procedures, standards and technical documentation.
• Provide technical guidance to security operations teams and external security partners when required.
• Help establish security guardrails for the responsible use of third-party AI tools and emerging technologies.
• Contribute to security incident exercises and provide technical guidance during escalated incidents.
• Mentor engineers and technical administrators while promoting security best practices across the organization.

What we're looking for:

• Approximately 6-8+ years of progressive experience in security engineering, infrastructure security or a related area, who have taken meaningful ownership of projects and worked across several areas of an organization.
• Broad hands-on experience across multiple security domains, such as cloud, network, database, container or identity security.
• Experience conducting security architecture assessments, design reviews or threat-modelling exercises.
• Demonstrated ownership of cross-functional security projects involving multiple technical teams.
• Experience securing at least one major cloud platform: Azure, AWS or GCP.
• Working knowledge of network security concepts, including firewalls, segmentation, load balancers, SASE or ZTNA.
• Exposure to database security, encryption, access controls and secrets management.
• Knowledge of IAM concepts, including SSO, federation and privileged access management.
• Strong communication skills with the ability to explain security risks and influence both technical and non-technical stakeholders.
• Ability to automate security or operational tasks using Python or Bash.

Nice to have:

• Experience with Azure security.
• Familiarity with CSPM, CNAPP or cloud workload protection platforms.
• Experience with Kubernetes or other container platforms, including image security, RBAC and software supply-chain security.
• Exposure to Oracle database security or comparable database-security platforms.
• Understanding of LLM-specific risks, AI governance, MCP servers or security controls for third-party AI tools.
• Experience with penetration testing, purple teaming or incident simulations.
• CISSP, CCSP, OSCP, cloud-security or other relevant certifications.
• Experience working within financial services or another regulated environment.