As of November 6, 2026, Jobsy lists 25 security engineer jobs in Toronto, ON. The median advertised pay is $181,002 a year (from 5 postings). The most active employers are Amazon Development Centre Canada ULC, Marqeta and Motive. Skills often requested: aws, communication skills, incident response and python.
No matching filters. Try another name.
Spotify
Candidates need software engineering experience, ideally in security or developer experience, and the ability to write code in Java, Python, Scala, C++ or TypeScript. Experience with agentic AI systems and an understanding of common security risks are also required.
Research, Security threats, Oracle Java, Python, Scala, C++
Dye & Durham Corporation: Dye & Durham Limited provides premiere practice management solutions empowering legal professionals every day, delivers vital data insights to…
7+ YOECandidates need 7+ years of cybersecurity experience, scripting skills in Python, PowerShell or Bash, and knowledge of frameworks such as NIST CSF, SOC 2, ISO 27001 and GDPR. Security certifications such as CEH, OSCP or GCIA are preferred.
EDR, firewall, IDS/IPS, DLP, Python, PowerShell
Querentia Inc.
Candidates are asked to apply to connect with Querentia Inc.'s recruitment team about this role.
Querentia Inc.
5+ YOECandidates need a degree or college diploma, 5+ years of software engineering experience, hands-on DevSecOps and CI/CD security skills, and two cloud SA&A completions with GOC experience. An active Secret or Top-Secret clearance is mandatory.
SonarQube, Snyk, Checkmarx, Prisma Cloud
Varicent
5+ YOEVaricent needs candidates with 5+ years in information security or security engineering, at least one security certification such as CISSP or CISA, and hands-on experience with cloud platforms and security tools like SIEM, WAF, DLP and EDR. Strong communication skills and the ability to make sound decisions with incomplete information are also required.
SIEM, EDR, WAF, DLP, CASB, OneTrust
Varicent
5+ YOECandidates need 5+ years in information security or security engineering, a bachelor's degree or equivalent experience, and at least one security certification such as CISSP or CISA. Hands-on experience with SIEM, EDR, WAF, DLP and cloud security on AWS, GCP or IBM Cloud is required.
SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway
Mysten Labs
3+ YOECandidates need 3+ years in security engineering or application security with real vulnerability findings, strong web application security knowledge, and skill in Rust, TypeScript, Python or Move. Interest in web3 is required, and a bachelor's degree or equivalent experience is needed.
Endor Labs, GitHub, CodeQL, Semgrep
Mysten Labs
3+ YOECandidates need 3+ years in security engineering, smart contract security or DeFi risk, with tools run in production and real vulnerabilities found. They need strong DeFi mechanics knowledge, proficiency in TypeScript, Python and Rust, and interest in web3.
Sui, Move, Rust, TypeScript, Python, SQL
Mercor
2+ YOECandidates need 2+ years of professional security engineering experience in application, cloud, infrastructure or vulnerability security. They must regularly use AI coding agents and be able to spot flaws in model-generated code.
Cursor, Claude Code, Codex, Windsurf, Gemini CLI
Mercor
2+ YOECandidates need 2+ years of professional security engineering experience in application, cloud, infrastructure security or vulnerability management. They must regularly use AI coding agents such as Cursor, Claude Code or Codex and identify flaws in generated code.
Cursor, Claude Code, Codex, Windsurf, Gemini CLI
TitanFile Inc.
4+ YOECandidates need 4 to 7 years of security engineering or cloud security experience, including at least 2 years hands-on in the cloud. They need AWS production security skills, vulnerability management, Python and Bash, Terraform and CI/CD experience, and the ability to obtain Secret-level security screening.
AWS, Azure, Terraform, GitLab CI, Django, Python
Baseten
3+ YOEBaseten needs 3+ years in security engineering or a similar role, ideally at a fast-paced startup. Candidates need strong cloud and container security skills, hands-on experience with security tools and scripting, knowledge of SOC 2, ISO 27001 and GDPR, and incident response expertise.
AWS, GCP, SIEM, IDS/IPS, vulnerability scanners
Signal 1
5+ YOECandidates need 5+ years of security engineering experience with deep Microsoft Azure security expertise, and hands-on knowledge across all security domains. Experience in regulated environments with SOC 2 Type II or HIPAA is required, along with strong communication skills for executives and customers.
Microsoft Entra ID, Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, Microsoft Purview, Azure Policy
Braze
Candidates need several years owning cloud security in production, with hands-on AWS, working GCP, and self-managed Kubernetes experience. They must read and write code in Python and Terraform.
AWS, GCP, Kubernetes, Terraform, CrowdStrike, Tenable
Braze
5+ YOECandidates need 5+ years of security engineering experience, including 4+ years in a corporate security environment with hands-on work. Strong hands-on skill with Mac endpoints, Okta, G Suite, CrowdStrike EDR, SOAR and network security is required.
CrowdStrike EDR, SIEM, SOAR, Okta, G Suite, VPN
People Culture Talent
Candidates need experience in security engineering, application or infrastructure security, strong software and scripting skills, and knowledge of cloud and application security. They should understand threat models and attack vectors and be able to balance security with usability, speed and business needs.
Incident response, Security threats
PagerDuty: PagerDuty is the central nervous system for a company’s digital operations.
5+ YOECandidates need 5+ years in security engineering with hands-on Kubernetes and container security experience, and strong software engineering skills in Python or Go and Terraform. They also need deep AWS security and least-privilege IAM knowledge, plus incident response and on-call experience.
Kubernetes, EKS, Istio, AWS, Terraform, CrowdStrike NG-SIEM
Sentry
2+ YOESentry needs candidates with 2 to 5 years in detection and response, corporate security or security engineering. They should have hands-on experience with alert triage, detection tuning and incident response, programming skills (Python preferred), and cloud and security tooling knowledge.
Python, SIEM, EDR, CNAPP, ZTNA, SSO
Sentry
2+ YOECandidates need 2 to 5 years of experience securing complex applications and cloud systems, plus a computer science degree or equivalent. They need to code in Python, TypeScript, Go or Rust and understand cloud security.
AWS, GCP, Azure, Kubernetes, Docker, Terraform
Motive
5+ YOECandidates need 5+ years in hardware security and working with product teams on security design. They also need 5+ years of hands-on C/C++ and Python development and knowledge of hardware root of trust, secure boot and device provisioning.
Firmware, Security threats, Security regulations, Hardware platforms, Embedded systems, Programming languages
The median advertised pay is $181,002 a year, across 5 postings that list pay. The lowest quarter pays under $181,002 and the top quarter over $196,747.
Amazon Development Centre Canada ULC (8), Marqeta (3), Motive (3), Mysten Labs (2) and LiveKit (2).
Postings most often mention aws, communication skills, incident response, python, regulatory compliance, identity and access management, ci/cd and security threats.
18 companies