Engineer, Cyber Security Operations

Cineplex•Toronto, ON

5d•CA$85,000 - CA$110,000•Hybrid

About The Position

As the Cyber Security Operations Engineer, you will take a lead role in protecting the organization’s data, systems, and services, partnering closely with the Director of Cyber Security to drive daily incident response, threat management, and risk reduction initiatives. You will design, implement, and manage security controls across enterprise IT, cloud platforms, and customer‑facing environments, playing a key role in strengthening defenses, enabling secure operations at scale, and reducing cyber risk across digital commerce and media platforms.

Requirements

8+ years of hands-on experience in IT security, with a strong foundation in protecting enterprise environments.
5+ years of experience in systems and network administration, including managing Windows client and server environments.
Experience maintaining firewall rule hygiene and ransomware resilient backup practices, with exposure to PCI environments and knowledge of Canadian privacy regulations.
Proven experience across IT security and information security advisory roles, with a strong foundation in technology risk management.
Experience in areas such as application security.

Nice To Haves

Information Security Architecture expertise considered an asset.
Relevant certifications such as CISSP, CRISC, CCSP, GCFA, GCIH, CEH, CISM, CISA, PCI QSA or ISA, and PMP are considered an asset.

Responsibilities

Design, deploy, and optimize security tooling across EDR/XDR, SIEM/SOAR, WAF, IAM, DLP, and NDR, improving visibility, detection, and response through automation, logging, and telemetry.
Design and implement secure solutions across cloud, on‑prem, and hybrid environments, embedding security by design and hardening networks, endpoints, and servers.
Identify and remediate risk through vulnerability assessments, patching, and support for penetration testing and bug bounty programs.
Strengthen cloud and application security by implementing controls and securing APIs, microservices, and web platforms, while integrating DevSecOps practices across CI/CD pipelines and infrastructure.
Serve as an escalation point for security incidents, leading root cause analysis, driving remediation, and improving detection and prevention capabilities through automation.
Support compliance and audit readiness by aligning controls to standards such as PCI DSS, ISO 27001, and NIST, maintaining documentation, and enabling secure business operations.
Assess and manage third party risk, ensuring secure vendor and SaaS integrations and ongoing monitoring of external partners.
Implement and manage identity and access controls including RBAC, MFA, conditional access, and PAM, enforcing least privilege across all systems.