Senior Security Engineer – DevSecOps, Vulnerability Management, Cryptography

Senior Security Engineer – DevSecOps, Vulnerability Management, Cryptography

Role: Senior Security Engineer – DevSecOps, Vulnerability Management, Cryptography

Location Toronto, Canada ON - M5S 1K9 (Hybrid)

Role Summary

We are seeking a

Senior Security Engineer

to support enterprise security initiatives with a focus on

vulnerability management

,

cryptography

,

secrets and certificate management

, and

DevSecOps enablement

. The resource will work closely with application, cloud, and platform teams to embed security controls across the SDLC and production environments.

This role is suitable for candidates with strong

hands‑on delivery experience

in

large enterprise or regulated environments

.

Key Responsibilities

Vulnerability Management

• Operate and support

enterprise vulnerability scanning

across applications, infrastructure, cloud, and containers.

• Analyze and triage vulnerability findings; work with engineering teams to drive timely remediation.

• Track vulnerabilities through remediation and closure.

• Support security assessments and penetration testing engagements.

Cryptography & Encryption

• Implement and support

encryption standards

for data at rest and in transit.

• Manage cryptographic controls, key usage, and lifecycle practices.

• Ensure cryptographic implementations align with organizational security standards.

Secrets & Certificate Management

• Implement and manage

secrets management

for applications, services, and CI/CD pipelines.

• Manage

certificate lifecycle

including issuance, renewal, rotation, and expiration.

• Eliminate hardcoded secrets and improve secure configuration practices.

DevSecOps

• Integrate security controls into

CI/CD pipelines

(DevSecOps).

• Support implementation of security tooling such as:

• SAST / DAST

• Dependency and container scanning

• Infrastructure‑as‑Code (IaC) scanning

• Partner with development teams to embed security early in the SDLC.

Mandatory Skill Set

• 5–8 years

of hands‑on experience in

Security Engineering

.

• Strong experience with

vulnerability scanning and vulnerability management

.

• Solid understanding of

cryptography

, encryption, and key management concepts.

• Hands‑on experience with

certificate management

.

• Proven experience implementing

DevSecOps

practices in CI/CD pipelines.

• Strong understanding of application and cloud security fundamentals.

Preferred / Nice‑to‑Have Skills

• Cloud platform experience: Azure, AWS, or GCP.

• Experience with containers, Kubernetes, and IaC.

• Scripting experience (Python, PowerShell, Bash).

• Experience in

banking, financial services, or other regulated industries

.

• Relevant security certifications (nice to have):

• CISSP, CCSP, CSSLP

• Cloud security or DevSecOps certifications