Senior Security Engineer

Fundserv; Toronto; On-site; CAD 120,000 - 132,000; Full time

Benefits offered by this job

Security certification costs covered

Job summary

Fundserv is seeking a Sr. Security Engineer to collaborate with Network, Database, SysOps and DevOps teams to secure the network, database, cloud, AI and container environment.

You will drive security practices across products and services, lead security initiatives, and mentor engineers. Ideal candidates will have hands-on cloud security experience (Azure/AWS/GCP), AI governance knowledge, and strong scripting ability to automate security tasks.

Qualifications

• Hands-on experience securing at least one major cloud service provider (Azure/AWS/GCP).
• Understanding of LLM specific risks (OWASP TOP 10 AI) and AI governance.
• Experience working with SASE, ZTNA, segmentation, firewall and certificate lifecycle.
• Proven experience in container security including image security, RBAC and application supply chain security.
• Strong background in database security, encryption, access control and secrets management.
• Deep IAM expertise, including SSO/federation, and privilege access management.
• Excellent communication and ability to influence cross-functional stakeholders.
• Ability to automate tasks using bash or python scripts.

Responsibilities

• Collaborate across teams to engineer and integrate security best practices into existing and new products, processes and services.
• Conduct threat modeling and security architecture reviews for new and existing design to ensure the outcome is a secure application.
• Define and maintain practical guardrail for enterprise AI use by managing Approved tools list, data classification and acceptable use policy.
• Contribute or lead security incident response efforts including tabletop exercises and incident simulations.
• Develop and maintain internal security documentation, guidelines and process documents for the security and project team.
• Be an integral part of key security initiatives such as network security, database security, AI security, cloud and container security.
• Mentor engineers and operation admins, raising overall security bar through guidance and example.

Skills

Cloud security

Threat modeling

IAM & access control

Security automation

Container security

Encryption & data security

Cross-functional communication

Scripting (bash/python)

Tools

CSPM

CNAPP

CWPP

Job description

We are looking for a Sr. Security Engineer who will work with Network, Database, SysOps and DevOps teams to secure Fundserv’s network, database, cloud, AI and container environment.

In this role, you will…

• Collaborate across teams to engineer and integrate security best practices into existing and new products, processes and services.
• Conduct threat modeling and security architecture reviews for new and existing design to ensure the outcome is a secure application.
• Define and maintain practical guardrail for enterprise AI use by managing Approved tools list, data classification and acceptable use policy.
• Contribute or lead security incident response efforts including tabletop exercises and incident simulations.
• Develop and maintain internal security documentation, guidelines and process documents for the security and project team.
• Be an integral part of key security initiatives such as network security, database security, AI security, cloud and container security.
• Mentor engineers and operation admins, raising overall security bar through guidance and example.

Why you are the person we’re looking for…

You’ve demonstrated the ability to do the following, gained through education and/or experience:

• Hands-on experience securing at least one major cloud service provider (Azure/AWS/GCP) environment leveraging CSPM, CNAPP and CWPP.
• Understanding of LLM specific risks (OWASP TOP 10 AI) and AI governance.
• Experience working with SASE, ZTNA, segmentation, firewall and certificate lifecycle.
• Proven experience in container security including image security, RBAC and application supply chain security.
• Strong background in database security, encryption, access control and secrets management.
• Deep IAM expertise, including SSO/federation, and privilege access management.
• Excellent communication and ability to influence cross-functional stakeholders.
• Ability to automate tasks using bash or python scripts.

The following is not required but will be a bonus:

• Relevant security certifications like CISSP, CCSP, OSCP or cloud specific certificates.
• Experience with penetration testing and/or purple teaming.
• Experience in guiding and mentoring more junior team members

Fundserv will cover the cost of maintaining your ISC2, ISACA and other security certificates.

Starting base salary range: $120,000 - $132,000/year

AI Statement

• Fundserv leverages the use of artificial intelligence (AI) to support our recruitment process through assistance with initial resume screening. However, AI is not used to make final assessment, selection or hiring decisions, and the hiring team maintains oversight over the end-to-end recruitment process.

This job posting is for an existing vacancy.