Intermediate Security Specialist

We are seeking an experienced Intermediate Security Specialist to join an active cyber defense operations team in a hands-on operational capacity. In this role, you will be responsible for leading the design and operationalization of a Continuous Threat Exposure Management (CTEM) program, embedding DevSecOps practices directly into CI/CD pipelines, and driving Cloud Security Posture Management (CSPM) across multi-cloud environments. Working cross-functionally alongside SOC analysts, DevOps engineers, and cloud specialists, you will continuously analyze attack surfaces, map attack paths, validate exploitability, and execute risk-based remediation.

Location: Toronto, ON (Hybrid – Up to 3 days/week onsite)

Duration: 8-month contract.

Advantages
Cutting-Edge Security Scope: Hands-on operational ownership of CTEM, DevSecOps, and multi-cloud CSPM/CNAPP tools.

Advanced Automation & AI Stack: Utilize AI-driven security tools (Security Copilot), automated pipeline scanners, and attack-path analysis platforms.

Dual Multi-Cloud Focus: Direct operational involvement across both Amazon Web Services (AWS) and Microsoft Azure environments.

Flexible Hybrid Model: Balance remote productivity with onsite collaboration in Toronto up to 3 days per week.

Responsibilities
Continuous Threat Exposure Management (CTEM): Execute daily threat and exposure analyses using Microsoft Defender, Tenable, Prisma Cloud, and native cloud security tools to identify vulnerabilities, misconfigurations, and exposed assets.

Risk-Based Prioritization & Remediation: Evaluate and score security exposures based on exploitability, threat intelligence, and impact to develop actionable remediation plans for IT and application teams.

DevSecOps & Pipeline Integration: Collaborate with development and DevOps teams to integrate, tune, and automate SAST, DAST, SCA, and Infrastructure-as-Code (IaC) scanning tools within automated CI/CD pipelines.

Secure Coding Guidance: Provide technical mentorship, best practices, and remediation support to developers to resolve application vulnerabilities and shift security practices left.

CSPM & CNAPP Operations: Deploy, configure, and operate Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) solutions across AWS and Azure environments.

Cloud Risk Remediation: Partner with cloud engineering teams to continuously identify, report, and remediate cloud misconfigurations, overly permissive IAM roles, and compliance gaps.

Security Automation & AI Tooling: Utilize security automation agents and AI-assisted tools (e.g., Security Copilot) to support threat analysis, correlate exposure data, and accelerate attack-path mapping.

Qualifications
Continuous Threat Exposure Management (CTEM): 5–8 years of experience in cyber security with proven expertise establishing or operating a CTEM or advanced vulnerability management program (Strictly Required).

DevSecOps & Pipeline Security: Hands-on experience integrating SAST, DAST, SCA, container scanning, and IaC security into automated CI/CD pipelines in collaboration with DevOps teams (Strictly Required).

Cloud Security & CSPM Operations: Demonstrated experience operating CSPM or CNAPP solutions (e.g., Prisma Cloud) across both AWS and Azure platforms (Strictly Required).

Risk Prioritization & Analysis: Proven ability to perform risk-based analysis, evaluate security exposures against organizational risk tolerance, and articulate remediation priorities to technical and non-technical stakeholders (Strictly Required).

Nice-to-Have Assets:
Prior experience delivering cyber security or DevSecOps solutions within a public sector environment.

Knowledge of container security, Kubernetes, and microservices architecture.

Industry certifications such as CISSP, CISM, GIAC, or Azure Security Engineer.

Summary
If you're interested in the "Intermediate Security Specialist" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.