Senior Security Engineer — Threat & Risk Lead

CI Financial; Toronto; On-site; CAD 70,000 - 120,000; Full time

Benefits offered by this job

Modern HQ near Union Station

Training Reimbursement

Paid professional designations

Employee Savings Plan

Corporate Discount Program

Parental Leave Top-up

Paid time off for volunteering

Job summary

CI Financial is seeking a Security Analyst II (Senior Security Specialist) to lead hands-on security operations across detection and response, vulnerability management, application security and cloud security. The role requires onsite presence four days a week to support collaboration and business needs.

The candidate will drive risk assessment, coordinate remediation across cross-functional teams and contribute to CI’s cybersecurity program through governance, architecture reviews and security

Qualifications

• Five or more years of progressive, hands-on information security experience.
• Experience leading complex security investigations or incident response activities.
• Experience with vulnerability management and remediation across enterprise infrastructure.
• Experience advising technology or business initiatives on security architecture, controls and risk treatment.

Responsibilities

• Deploy, integrate, configure and enhance security solutions in accordance with approved architecture, change management and operating procedures.
• Monitor security platforms for operation, data quality, coverage, performance and control effectiveness.
• Lead technical troubleshooting and coordinate with internal teams and vendors to resolve security technology issues.
• Evaluate security capabilities and recommend enhancements to reduce risk and improve detection.
• Develop scripts, queries, automation or repeatable workflows to improve analysis, reporting and response.
• Lead application security scanning activities across SAST, DAST, IaC, SAC, API testing and support teams in interpreting findings and selecting remediation approaches.
• Partner with application owners and developers to embed security requirements into delivery processes and resolve material findings.
• Provide security guidance through the system development lifecycle, including architecture design review, threat modelling, secure design and security testing.
• Review cloud applications, configurations, identity controls, data flows and logging to identify security risk and safeguards.
• Investigate and triage complex security alerts and suspected compromises; determine scope and containment actions.
• Lead or coordinate incident response activities, including investigation, containment, eradication, recovery and lessons learned.
• Improve detection coverage by identifying telemetry gaps and refining use cases.
• Perform proactive threat hunting using endpoints, network, identity, cloud and SIEM telemetry.
• Analyse threat intelligence and security advisories to determine relevance and actions.
• Participate in after-hours on-call rotation.

Job description

CI Financial is seeking a Security Analyst II (Senior Security Specialist) to lead hands-on security operations across detection and response, vulnerability management, application security and cloud security. The role requires onsite presence four days a week to support collaboration and business needs.

The candidate will drive risk assessment, coordinate remediation across cross-functional teams and contribute to CI’s cybersecurity program through governance, architecture reviews and security