Job Posting Details

Int Security Specialist

Back to All Jobs
[social_share]

Our Client requires an intermediate Security Specialist to support the Cyber Security Defense Operations team in 2 primary cybersecurity areas: 

• Continuous Threat Exposure Management (CTEM): Leading the design and operationalization of a CTEM program that provides continuous visibility into the organization’s cyber exposure.  

• DevSecOps Pipeline Security & Cloud Security Posture Management: Implementing and enhancing DevSecOps practices by embedding security into the software development lifecycle (SDLC) and CI/CD pipelines. 

Work is hybrid at client location in Toronto, ON. 

Mandatory Requirements

• Minimum 5–8 years of experience in cyber security, with extensive exposure to security operations and vulnerability management or devSecOps programs 

• Proven experience developing and executing a continuous threat exposure management or advanced vulnerability management program (e.g., CTEM), including continuous discovery of exposures, threat scenario analysis, attack-path mapping, and risk-based prioritization of remediation actions. 

• Deep DevSecOps experience, with hands-on implementation of secure CI/CD pipeline practices (integrating SAST, DAST, SCA, IaC security scanning, container security scans) in collaboration with development/DevOps teams. 

• Strong cloud security expertise across AWS and Azure, including practical knowledge of cloud-native security controls (IAM, network security groups, logging/monitoring, encryption) and cloud threat detection services (e.g., AWS GuardDuty, Azure Defender/Sentinel). 

• In-depth experience operating a Cloud Security Posture Management (CSPM) or CNAPP solution (e.g., Prisma Cloud or similar) to continually assess and improve cloud posture. 

• Excellent written and verbal communication skills, with the ability to produce clear technical documentation, reports, and executive-level summaries. 

Other Mandatory Requirements: 

1. Continuous Threat Exposure Management (CTEM) Experience: 

• Demonstrated experience establishing or significantly contributing to a CTEM or continuous vulnerability management program. 

• Hands-on experience running programs, including Security Copilot and security automation agents, that continuously identify and mitigate security exposures, aligning closely with organizational risk tolerance.  

• Perform risk-based analysis and prioritization, evaluating where to focus security resources for maximum impact and articulating the rationale to stakeholders. 

2. DevSecOps & Application Security Experience: 

• Hands-on experience integrating security into CI/CD pipelines (implementing SAST, DAST, container security, etc.). 

• Experience collaborating with development/DevOps teams to remediate security issues and improve secure coding practices. 

• Familiarity with infrastructure-as-code (IaC) and managing security in containerized or cloud-native application environments. 

3. Cloud Security & CSPM Operations: 

• Strong experience with AWS and Azure security controls and best practices. 

• Proven operation of a CSPM or CNAPP platform (e.g., configuring rules, analyzing findings, managing remediation workflows). 

• Ability to align cloud security initiatives with overall security program and compliance requirements. 

Desirable Requirements

• Experience in healthcare or public sector environments

• Prior exposure to or participation in threat intelligence and threat hunting activities. 

• Knowledge of modern containerization and cloud-native application development practices, including Kubernetes security and microservices architecture, as a plus. 

• Relevant certifications (e.g., CISSP, CISM, GIAC, Azure Security Engineer) 

Job Posting ID: 57106

Location: Toronto, Ontario (Hybrid up to 3 days onsite subject to manager’s discretion)

Estimated Starting Date: Nov 30, 2026

Estimated End Date: Aug 10, 2027 + poss 1yr+ extension

Posting Closing Date: October 26, 2026

Back to All Jobs

Apply for this Job Posting