Cyber Security Engineer I

TD•Mississauga, ON

2d•CA$81,600 - CA$115,200•Onsite

About The Position

The Security Engineering Vulnerability Protect team is responsible for evaluating, designing, engineering, implementing, and supporting enterprise security technologies. The team delivers security capabilities that enable forensic investigations, vulnerability management, application security testing, database monitoring, attack surface management, and mobile security assessments. As a Security Engineer I, you will participate in the design, build, certification, deployment, and transition of security solutions to operational support teams. You will work collaboratively with security engineers, developers, infrastructure teams, business partners, and vendors to deliver secure, reliable, and scalable security services across the enterprise. The ideal candidate is curious, adaptable, and technically strong, with a passion for security engineering and problem-solving. They demonstrate an engineering mindset, proactively identify root causes of technical issues, and contribute to the successful delivery of security solutions. This role will be responsible for solutions in areas such as, but not limited to: Digital Forensic investigation tools, Vulnerability assessment and scanning platforms, Software Composition Analysis and Static Application Security Testing, Database activity monitoring, External attack surface management tooling, Mobile application security and Pen testing tools. The successful candidate must have demonstrated advanced ability to engineer, design, build, support and document solutions in these areas of Security Engineering working closely with the Business, other Security Engineering teams to ensure built solutions enhance productivity and add value to the organization.

Requirements

Advanced knowledge in a wide range of Security technologies, frameworks, tools, standards, processes and procedures.
Experience with vulnerability management and security assessment tools.
Experience with forensic investigation technologies.
Understanding of Software Composition Analysis (SCA) and Static Application Security Testing (SAST) solutions.
Knowledge of cloud and virtualized computing environments and associated security controls.
Working knowledge of Windows Server and Linux/Unix operating systems.
Familiarity with Linux command-line tools and PowerShell.
Understanding of networking concepts and security technologies, including: Firewalls and proxy technologies, Intrusion detection and prevention systems, Authentication and identity controls, DNS, SMTP, HTTP/HTTPS, TCP/IP, and SNMP.
Strong analytical and troubleshooting skills.
Exceptional record of competence and a strong ability to communicate with other engineers, technology owners and business partners.
Strong problem-solving, analytical, and organizational skills.
Excellent verbal, written, and presentation communication skills.
Ability to communicate technical concepts effectively to both technical and non-technical audiences.
Proven ability to build strong relationships across engineering, operations, business, and vendor teams.
Strong attention to detail and commitment to high-quality documentation.
Bachelor's degree in Computer Science, Engineering, Information Security, or a related discipline; or equivalent work experience.
Minimum 3+ years of relevant technology or security engineering experience.

Nice To Haves

Experience developing scripts or automation using Python, PowerShell, or similar languages.
Experience integrating with APIs and extracting data from security tools.
Familiarity with enterprise security architecture and security engineering best practices.
Passion for learning emerging security technologies and industry trends.
Experience implementing security solutions across multiple business or technology domains.
Ability to work effectively within cross-functional and geographically distributed teams.
Customer-focused approach with a high degree of professionalism.
Vendor management and negotiation experience.
Industry certifications such as CISSP, CCSP, or equivalent.

Responsibilities

Participate in the design, build, certification, deployment, and transition of security solutions to operational support teams.
Work collaboratively with security engineers, developers, infrastructure teams, business partners, and vendors to deliver secure, reliable, and scalable security services across the enterprise.
Proactively identify root causes of technical issues, and contribute to the successful delivery of security solutions.
Engineer, design, build, support and document solutions in areas such as Digital Forensic investigation tools, Vulnerability assessment and scanning platforms, Software Composition Analysis and Static Application Security Testing, Database activity monitoring, External attack surface management tooling, Mobile application security and Pen testing tools.
Interact with Engineering teams, multiple lines of Business, Infrastructure teams, Application Development, Support, Vendors and Service Providers.
Work independently on complex technical initiatives with significant business impact.
Manage multiple priorities in a dynamic and fast-paced environment.
Adapt to new technologies and evolving business requirements.
Collaborate and share knowledge with others.