Senior Security Engineer

Fundserv has been the indispensable hub for the Canadian investment industry for over 30 years, connecting manufacturers, distributors, intermediaries, and service providers to build solutions that simplify business interactions and promote innovation in the industry. We do this by focusing on our corporate values of Collaboration, Adaptability, Integrity, and Respect. We are looking for a Sr. Security Engineer who will work with Network, Database, SysOps and DevOps teams to secure Fundserv’s network, database, cloud, AI and container environment. In this role, you will… Collaborate across teams to engineer and integrate security best practices into existing and new products, processes and services. Conduct threat modeling and security architecture reviews for new and existing design to ensure the outcome is a secure application. Define and maintain practical guardrail for enterprise AI use by managing Approved tools list, data classification and acceptable use policy. Contribute or lead security incident response efforts including tabletop exercises and incident simulations. Develop and maintain internal security documentation, guidelines and process documents for the security and project team. Be an integral part of key security initiatives such as network security, database security, AI security, cloud and container security. Mentor engineers and operation admins, raising overall security bar through guidance and example. Why you are the person we’re looking for… You’ve demonstrated the ability to do the following, gained through education and/or experience: Hands-on experience securing at least one major cloud service provider (Azure/AWS/GCP) environment leveraging CSPM, CNAPP and CWPP. Understanding of LLM specific risks (OWASP TOP 10 AI) and AI governance. Experience working with SASE, ZTNA, segmentation, firewall and certificate lifecycle. Proven experience in container security including image security, RBAC and application supply chain security. Strong background in database security, encryption, access control and secrets management. Deep IAM expertise, including SSO/federation, and privilege access management. Excellent communication and ability to influence cross-functional stakeholders. Ability to automate tasks using bash or python scripts. The following is not required but will be a bonus: Relevant security certifications like CISSP, CCSP, OSCP or cloud specific certificates. Experience with penetration testing and/or purple teaming. Experience in guiding and mentoring more junior team members Fundserv will cover the cost of maintaining your ISC2, ISACA and other security certificates. Starting base salary range: $120,000 - $132,000/year AI Statement Fundserv leverages the use of artificial intelligence (AI) to support our recruitment process through assistance with initial resume screening. However, AI is not used to make final assessment, selection or hiring decisions, and the hiring team maintains oversight over the end-to-end recruitment process. This job posting is for an existing vacancy. Fundserv's total compensation package includes a competitive performance pay program, employer-paid group benefits, an RRSP matching program, and more. We recognize that there are different paths to gaining skills, so if you have diverse experience which doesn’t match the criteria exactly but you think you would be great in this role, we invite you to apply! Why Work Here Our Benefits and Perks We’ve consistently been recognized as a GTA Top Employer and a Canada Top Small & Medium Employer. Below are some of the reasons why: Employer-paid premiums for group health plan, including a Healthcare Spending Account Up to $2,000 per year for mental health practitioners and corporate-wide mental health days per year Wellness benefit for gym memberships, workout equipment, meditation and wellness apps, and more! RRSP matching program $500 one-time stipend for home office equipment and monthly home-internet subsidy Access to tools like LinkedIn Learning and Pluralsight and additional training opportunities EI top-up programs for maternity and parental leave, family medical, and family caregiver leave Ability to work out of province for 20 days after 2 years of employment Our Hybrid Work Policy We recognize the importance of flexibility and work-life balance, and as such our hybrid model is purpose-led – we come in for a reason, not to fill a quota.

The role involves engineering security best practices across network, database, cloud, and AI environments while conducting threat modeling and architecture reviews. Additionally, the engineer will lead incident response efforts and mentor other team members to raise the overall security bar.

Candidates need hands-on experience with major cloud providers, container security, and a deep understanding of LLM risks and AI governance. Proficiency in IAM, network security tools like SASE/ZTNA, and automation via Python or Bash is required.

• Group Health Plan • Healthcare Spending Account • Mental Health Support • Wellness Benefit • RRSP Matching Program • Home Office Equipment Stipend • Home Internet Subsidy • LinkedIn Learning • Pluralsight • EI Top-up Programs • Professional Certificate Maintenance Cost

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Cloud Security
• AI Governance
• SASE
• ZTNA
• Container Security
• Database Security
• IAM
• Python
• Bash
• Threat Modeling
• Security Architecture
• Incident Response
• CSPM
• CNAPP
• CWPP
• Secrets Management
• Office Equipment
• Hybrid Model
• Influencing Skills
• AI Security
• IT Security Documentation
• Cloud Services
• Certified Cloud Security Professional (CCSP)
• IT Security Architecture
• Supply Chain Security
• Acceptable Use Policy
• Access Controls
• Adaptability
• Artificial Intelligence
• Amazon Web Services
• Penetration Testing
• Microsoft Azure
• Bash (Scripting Language)
• Mental Health
• Management
• Certified Information Systems Security Professional
• Communication
• Encryption
• DevOps
• Firewall
• Governance
• Innovation
• Python (Programming Language)
• Network Security
• Mentorship
• Offensive Security Certified Professional
• Open Web Application Security Project (OWASP)
• Caregiving
• Role-Based Access Control (RBAC)
• Resume Screening

• Security & Safety
• Technology
• Software
• Engineering
• Finance & Accounting
• Security Engineer
• Cyber Security Engineer
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

Expérience minimale

5+ ans

Langue de l’offre

anglais

Heures de travail

40 heures par semaine