Senior Security Engineer

Senior Security Engineer

Location: Toronto, On-Site

Reports to: Head of Security

THE ROLE

This is an early, high-ownership security engineering hire. You'll design and operate the security platform end to end — identity, endpoints, detection, automation, and compliance — for a company where security is a first-class product and customer requirement, not an afterthought. You'll build greenfield, set the standards the rest of the team inherits, and translate demanding compliance obligations into clean, automated engineering. If you want to own a security program from the ground up in a mission-driven defence-tech environment, this is it.

WHAT YOU'LL DO

- Build and operate our identity platform as infrastructure-as-code (Terraform-managed IdP), including SSO/SCIM integrations across the full application estate

- Implement phishing-resistant authentication and device-trust enforcement using hardware security keys (WebAuthn/FIDO2)

- Deploy, maintain, and tune endpoint detection & response (EDR) across the device fleet

- Design and maintain secure MDM baselines — configuration profiles and policies for all managed endpoints

- Integrate our HRIS and IT asset-management systems with identity and endpoint tooling to automate joiner/mover/leaver and full asset-lifecycle workflows

- Stand up and refine log-ingestion pipelines into our SIEM / security-analytics platform

- Develop detection-as-code capabilities — version-controlled, tested, CI/CD-deployed detections

- Design and operate SOAR-driven automation that orchestrates identity, secrets management, the productivity/collaboration suite, security tooling, and custom GenAI/LLM models (managed/self-hosted inference)

- Deploy and continuously refine enterprise security controls to counter emerging threats and meet compliance baselines (CPCSC, NIST SP 800-171 / ITSP.10.171)

- Ensure every security platform and control satisfies Canadian data-residency requirements

- Own third-party/vendor se...