11771 in Toronto

This role will focus on two primary areas:

• Continuous Threat Exposure Management (CTEM): Leading the design and operationalization of a CTEM program that provides continuous visibility into the organization’s cyber exposure. This includes threat exposure analysis, attack path analysis, validation of remediation through testing, and risk-based prioritization to ensure critical issues are addressed first. The resource will strengthen coordination between CTEM, SOC, and vulnerability management workflows, ensuring that exposure findings translate into actionable improvements in monitoring, detection, and response.
• DevSecOps Pipeline Security & Cloud Security Posture Management: Implementing and enhancing DevSecOps practices by embedding security into the software development lifecycle (SDLC) and CI/CD pipelines. The resource will lead the integration of security testing tools (SAST, DAST, SCA, container/IaC scanning) into automated build processes, ensuring vulnerabilities are identified and addressed as early as possible. In parallel, the role will oversee cloud security posture management (CSPM) and cloud-native application protection platform (CNAPP) operations across OH’s AWS and Azure environments, to continuously monitor and remediate cloud security risks.

This role is explicitly hands-on and operational. It requires a strong technical background in cyber defense operations and the ability to execute and deliver tangible outcomes in the areas above. The resource will be expected to work across teams (SOC, DevOps, cloud engineering, etc.) to implement and execute, rather than only providing recommendations.

Responsibilities:

• CTEM & Exposure Management: Operate and Mature Day-to-Day CTEM Activities: Execute continuous, day-to-day threat and exposure analysis as part of regular CTEM operations. This includes daily review and analysis of attack surface risk using Microsoft Defender, Tenable, Prisma Cloud, and native Azure and AWS security services, to identify vulnerabilities, misconfigurations, identity risks, and externally exposed assets requiring immediate attention.
• Risk-Based Prioritization & Remediation: Implement mechanisms to assess and score exposures based on exploitability, potential impact, and relevant threat intelligence. Develop risk-based remediation plans and work with IT and application teams to ensure that critical exposures are remediated promptly.
• DevSecOps & Cloud Security Operations: Collaborate with software development and DevOps teams to embed security testing into the CI/CD pipelines. Implement and tune SAST, DAST, SCA, and Infrastructure-as-Code scanning tools so that code, dependencies, and cloud templates are scanned for vulnerabilities with each build/release.
• Cloud Security Posture Management: Take ownership of monitoring and improving the security posture of OH’s AWS and Azure environments. Regularly review cloud configurations and identify misconfigurations or compliance gaps.

Desired Skills:

• Experience in healthcare or public sector environments, particularly Ontario health sector.
• Prior exposure to or participation in threat intelligence and threat hunting activities.
• Knowledge of modern containerization and cloud-native application development practices, including Kubernetes security and microservices architecture, as a plus.
• Relevant certifications (e.g., CISSP, CISM, GIAC, Azure Security Engineer).

Required Skills:

• Minimum 5–8 years of experience in cyber security, with extensive exposure to security operations and vulnerability management or DevSecOps programs.
• Proven experience developing and executing a continuous threat exposure management or advanced vulnerability management program.
• Deep DevSecOps experience, with hands-on implementation of secure CI/CD pipeline practices.
• Strong cloud security expertise across AWS and Azure.
• In-depth experience operating a Cloud Security Posture Management (CSPM) or CNAPP solution.
• Excellent written and verbal communication skills.

Core competencies:

• Strong focus on execution, delivery, and measurable outcomes.
• Strong analytical and problem-solving skills.
• Execution and delivery focus, demonstrating a bias toward action and results.
• Adaptability and continuous learning.
• Teamwork and mentorship.