Cyber Security Engineer

Momentum Financial Services Group • Toronto, ON

1d • CA$142,000 - CA$160,000 • Hybrid

About The Position

Reporting to the Senior Manager, Cyber Operations, the Cyber Security Engineer will be responsible for engineering, implementing, and continuously improving enterprise security controls and capabilities across multiple security domains. This role involves designing, implementing, and optimizing endpoint protection controls, enhancing email security, leading vulnerability management, deploying and maintaining secure web gateways and cloud security controls, strengthening AWS security, securing enterprise AI solutions, developing SIEM detections, supporting application security, and managing certificate lifecycles.

Requirements

• Strong problem-solving skills with the ability to identify risks and implement practical security solutions.
• Passion for emerging cybersecurity challenges, including AI/GenAI security and security automation.
• Ability to collaborate effectively across Infrastructure, Development, Cloud, SOC, Risk, and Business teams.
• Strong communication skills with the ability to influence stakeholders and drive security best practices.
• Experience balancing multiple priorities in a dynamic and fast-paced environment.
• Continuous improvement mindset focused on strengthening security posture and operational efficiency.
• Minimum 7 years of hands-on Security Engineering experience.
• Proven experience designing, implementing, tuning, troubleshooting, and optimizing security controls within large enterprise or regulated environments.
• Experience across: Endpoint Security, Email Security, Vulnerability Management, AWS Cloud Security, SIEM/SOC Engineering, Application Security, Certificate Lifecycle Management, AI Security and Governance.
• Strong experience partnering with technical and business stakeholders to drive security initiatives and remediation activities.

Nice To Haves

• Experience within Financial Services, Retail, or other regulated industries.
• Exposure to scripting and automation technologies.
• Expertise in several of the following areas: Endpoint Detection & Response (EDR), Email Security Platforms, Vulnerability Management Programs, Secure Web Gateways (SWG), Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), AWS Security Services and Guardrails, SIEM Engineering and Detection Development, Security Monitoring and Alert Tuning, AI/GenAI Security Controls, Application Security Testing, PKI/TLS Certificate Lifecycle Management, Zero Trust Security Architecture, Security Automation and Orchestration, API Integrations, PowerShell, Python, or similar scripting languages.
• One or more of the following certifications are considered strong assets: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), AWS Certified Security – Specialty, GIAC Security Certifications, Other relevant industry-recognized cybersecurity certifications.

Responsibilities

• Design, implement, and optimize endpoint protection controls, threat detection, response processes, and hardening standards.
• Enhance email security capabilities, threat protection policies, detection mechanisms, and incident response workflows.
• Lead risk-based vulnerability discovery, assessment, prioritization, remediation tracking, and reporting.
• Partner with infrastructure, cloud, application, and business teams to drive timely remediation of security findings.
• Design, deploy, and maintain Secure Web Gateway (SWG), Proxy, CASB/SSE, and Cloud Security Posture Management (CSPM) controls.
• Strengthen SaaS and AI application visibility, data protection policies, governance processes, and exception management.
• Enhance AWS security guardrails across identity, networking, logging, data protection, and workload security.
• Embed secure configuration standards into cloud deployment and operational practices.
• Secure enterprise AI and GenAI solutions through monitoring, logging, data protection, control validation, and governance.
• Develop and tune SIEM detections, dashboards, alerts, SOC integrations, and automated security workflows.
• Support application security assessments, remediation governance, and secure development practices.
• Manage PKI/TLS certificate lifecycle processes, renewals, standards, and associated risk controls.

Benefits

• Health and dental plans with 100% of the premiums covered.
• Employee Assistance Program to support your mental well-being and provide resources for personal challenges.
• Robust retirement savings options.
• Reimbursement for tuition assistance and professional development.
• Discounts through Perkopolis.
• Participation in rewards and recognition programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior