Senior Web App Security Consultant

CIBC US; Toronto; On-site; CAD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive salary

Incentive pay

Banking benefits

Defined benefit pension plan

Employee share purchase plan

Wellbeing support

MomentMakers recognition

Job summary

CIBC is seeking a Web Application Security Consultant to join the Cyber Operations team in Toronto. You will manage web app security configurations, onboard applications to WAF and bot/DDoS controls, monitor traffic, and refine security settings to minimize false positives while protecting applications from web threats.

You will collaborate with Security Service Management and SOC, participate in POC evaluations, and stay ahead of emerging security trends with evolving tools and methods.

Qualifications

• Bachelor's degree or diploma in Computer Science, Engineering, or a related field.
• CISSP, CRISC, or CISM designation is a plus.
• At least five years of experience as an Information Security Consultant or a similar role.

Responsibilities

• Manage web application security configurations for CIBC applications, including onboarding onto WAF, bot controls and DDoS controls.
• Monitor onboarded applications and fine-tune security settings to reduce false positives and minimize impact on legitimate users.
• Troubleshoot security-related issues for applications and adjust configurations as threats evolve.
• Participate in POC evaluations for new web application security products and assess their effectiveness.

Skills

Analytical Thinking

Application Firewall

Communication

Decision Making

Information Security

Investigating

IT Governance

Mentorship

Risk Assessments

Security Technologies

Security Testing

System Security

Troubleshooting

Web Application Firewall (WAF)

Web Application Security

Web Application Vulnerabilities

Education

Bachelor's degree in Computer Science, Engineering, or related field

Job description

CIBC is seeking a Web Application Security Consultant to join the Cyber Operations team in Toronto. You will manage web app security configurations, onboard applications to WAF and bot/DDoS controls, monitor traffic, and refine security settings to minimize false positives while protecting applications from web threats.

You will collaborate with Security Service Management and SOC, participate in POC evaluations, and stay ahead of emerging security trends with evolving tools and methods.