Log in Sign up free
Apply now

Posted 22 days ago

Security Specialist - Cyber Security

@ J&M Group

View all jobs

Toronto, Ontario

Full-time
Apply now
SIGNALS

Overview

J&M Group is hiring a Security Specialist focused on cyber security. The role runs continuous threat exposure management, DevSecOps and cloud security programs.

Responsibilities:

  • Establish or contribute to a CTEM or continuous vulnerability management program
  • Perform risk-based analysis and prioritize security resources
  • Integrate SAST, DAST and container security into CI/CD pipelines
  • Work with development and DevOps teams to remediate security issues
  • Configure and operate a CSPM or CNAPP platform and manage remediation

Requirements summary:

  • Demonstrated CTEM or continuous vulnerability management experience
  • Hands-on DevSecOps and application security experience
  • Familiarity with infrastructure-as-code and cloud-native environments
  • Strong AWS and Azure security controls experience
  • Proven CSPM or CNAPP operations experience

Tools & skills

AWSAzureCSPM platformCNAPP platformCI/CD pipelines
Source and dates

Source type not verified · apify-linkedin

Employer posting date
2026-10-20
First seen by our source
2026-11-11
Source record updated
2026-11-11

These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.

Job details

DepartmentIT
Hours per week40 (estimated)
Work settingOffice
PositionMostly sitting
Physical demandsphysical low · computer high

Summary and details written by AI from the posting; the employer’s posting is the authority.

Apply now

J&M Group

View all jobs
FieldValue
Open jobs on Jobsy66
Job description
Required Experience

  • Continuous Threat Exposure Management (CTEM) Experience :
  • Demonstrated experience establishing or significantly contributing to a CTEM or continuous vulnerability management program.
  • Hands-on experience running programs that continuously identify and mitigate security exposures, aligning closely with organizational risk tolerance.
  • Perform risk-based analysis and prioritization, evaluating where to focus security resources for maximum impact and articulating the rationale to stakeholders.
  • DevSecOps & Application Security Experience:
  • Hands-on experience integrating security into CI/CD pipelines (implementing SAST, DAST, container security, etc.).
  • Experience collaborating with development/DevOps teams to remediate security issues and improve secure coding practices.
  • Familiarity with infrastructure-as-code (IaC) and managing security in containerized or cloud-native application environments.
  • Cloud Security & CSPM Operations :
  • Strong experience with AWS and Azure security controls and best practices.
  • Proven operation of a CSPM or CNAPP platform (e.g., configuring rules, analyzing findings, managing remediation workflows).
  • Ability to align cloud security initiatives with overall security program and compliance requirements.

Similar jobs

  • Security Specialist V

    Toronto, ON
    Hybrid

    SPECTRAFORCE

    10+ YOECandidates need 10+ years in IT risk and governance in regulated industries, experience with IOR-style audit testing and remediation validation, and strong written and verbal communication. Professional certifications such as CISA, CRISC or CISSP are preferred, and experience designing AI-enabled assurance is required.

    ServiceNow, RSA Archer, JIRA, Confluence, SharePoint

  • Senior Security Specialist

    Toronto, ON
    Full Time

    BDO Canada LLP: BDO Canada LLP is a leading provider of professional services to clients across a variety of sectors and segments.

    5+ YOECandidates need 5+ years of progressive cybersecurity experience, mainly in security operations, incident response or threat detection, plus a degree or equivalent experience. Strong analytical skills, clear communication and industry certifications are assets.

    Cybersecurity, Root cause analysis, Regulatory compliance, Incident response, Collaboration, Computer technology

  • Intermediate Security Specialist

    Toronto, ON
    Contract

    Randstad Canada

    5+ YOECandidates need 5 to 8 years of cybersecurity experience, including hands-on work running exposure management or vulnerability programs. They must also have operated cloud security tools across both AWS and Azure and be able to rank risks for technical and non-technical audiences.

    Microsoft Defender, Tenable, Prisma Cloud, Security Copilot, AWS, Azure

    Security Specialist V

    Toronto, ON
    $80.59–$94.88/hrContract

    Randstad Canada

    10+ YOECandidates need 10+ years of IT risk and GRC experience in a regulated industry, plus audit testing and root cause analysis skills. Strong written and verbal communication and meticulous attention to detail are essential.

    ServiceNow GRC, Power BI, Python

    Security Specialist V

    Toronto, ON
    $86.24–$99.10/hrContract

    Randstad Canada

    10+ YOECandidates need 10+ years of experience in regulatory exams, internal audit, technology issues management or technology GRC, with hands-on control testing in a large enterprise. Strong written communication and advanced Microsoft Office skills are also required.

    Microsoft PowerPoint, Microsoft Word, Microsoft Excel, Microsoft Visio, Power BI, Tableau

  • Sr. Security Specialist - GRC/Banking/CISSP

    Toronto, ON
    Contract

    BeachHead

    10+ YOECandidates need 10+ years in IT audit, governance, risk and compliance, with proven expertise in security controls and audit validation. Strong written and verbal communication, knowledge of NIST, COBIT and ITIL, and experience with RSA Archer, JIRA, ServiceNow and Excel are required.

    RSA Archer, JIRA, Confluence, SharePoint, MS Office, Excel

  • Security Specialist - Level 3

    Ottawa, ON
    $107k–$132k/yrFull Time

    Altis

    7+ YOECandidates need 7+ years in identity and access management or cybersecurity, including 5+ years delivering enterprise IAM solutions, plus a university degree or equivalent. Fluency in English and French, written and spoken, is required.

    Saviynt, SQL, Oracle, PowerShell

  • Senior Security Specialist - Cloud Red Team(Global Security)

    Toronto, ON
    Full Time

    Royal Bank of Canada: Royal Bank of Canada is a global financial institution with a purpose-driven, principles-led approach to delivering leading performance.

    Stock listing: TSX:RY · NYSE:RY · Source checked: 2026-11-02

    3+ YOECandidates need scripting experience automating cloud operations through APIs or CLIs, and strong experience managing and building systems on AWS, Azure or Google Cloud. They also need working knowledge of DevOps, infrastructure-as-code, CI/CD, Linux and Windows, and the ability to explain complex technical concepts clearly.

    AWS, Microsoft Azure, Google Cloud Platform, Terraform, CloudFormation, Ansible

Locations & environments

Locations

All of CanadaRemote · Hybrid · On-site · Field

Pro tip: add remote jobs to widen your search.

Exclude locations

Workplace type

Company jobs in these results

These are this company’s jobs loaded in your current search. The company may have more openings.