Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 68 days ago

Senior Cyber Security Engineer

CAAT Pension16 open roles

Pay
$125,800 – $157,200 a year
Where
Toronto, ON
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Cyber Security EngineerCAAT Pension · Toronto, ON

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CAAT Pension's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. CAAT Pension postings stay open a median of 16 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 68 days ago

CAAT Pension median: 16 days open

The posting

At CAAT, we’re passionate about what we do. And it shows!

Here, you’ll find a cultural spark in everything we do – from the way we partner with members and employers, to the way we work, collaborate, and grow. It doesn’t just feel different at CAAT. It is different. We’re one of the fastest-growing pensions in the country for a reason. We challenge the status quo, making a real impact on the hundreds of employers we serve – from education institutions to major corporations and household brands. And we’re just getting started. Driven by core values and a shared purpose, we’re fierce champions for better retirement security, known for our can-do culture where everyone plays a role in bringing our vision to life. If this sounds like a fit, we’d love you to be a part of it.

About the Role:

We are seeking a Senior Cybersecurity Engineer for our Information Technology team. The Senior Cyber Security Engineer will play a critical role within the Security Operations team, responsible for safeguarding the organization's IT infrastructure, applications, and data against cyber threats. The role requires deep expertise in security monitoring, incident response, vulnerability management, and cloud security, ensuring the organization's security posture remains strong. The successful incumbent will bring hands-on experience with security tools and platforms such as Splunk Enterprise Security, Azure Cloud Security, CrowdStrike, Rapid7 InsightVM, Imperva WAF, and Data Loss Prevention (DLP) solutions. They will drive proactive threat detection, incident response, and security enhancements, working closely with cross-functional teams to implement robust security measures.

As the Newest Member of our Team, You’ll:

  • Provide SME leadership to improve Cloud security posture, ensuring adherence to regulatory standards and best practices across all infrastructure and services.
  • Deploy and manage WAF, DLP (endpoints, cloud, email), XDR/ EDR platforms, Cloud Security tools (CrowdStrike CNAPP, Tenable CSPM) and SIEM and SOAR (Azure); lead Incident Response efforts while integrating AI/ML threat detection to safeguard against evolving AI based and data-centric risks.
  • Partner with software engineering teams to embed secure coding, conduct application security testing (SAST &DAST), and reinforce application-layer defenses throughout the SDLC.
  • Manage and enhance the Vulnerability Management Program using Tenable; provide SME-level threat intelligence to proactively track emerging vulnerabilities and drive the implementation of security patches, configuration changes, and targeted mitigations.
  • Conduct regular risk assessments, support penetration testing (external & internal), and compliance audits to enforce adherence to industry frameworks (ISO 27001, NIST, CIS, GDPR, SOC 2), while actively supporting all security audit and regulatory requirement initiatives.
  • Develop and continuously refine security playbooks, incident response plans, and threat-hunting methodologies to strengthen detection capabilities and organizational resilience.
  • Monitor, analyze, and respond to incidents via Azure Sentinel; provide SME-level support to analysts using CrowdStrike and Azure Sentinel for advanced threat investigations, while crafting SIEM use cases tailored to the current threat landscape.
  • Lead IR efforts—including containment, eradication, and forensic analysis—while executing a strategic vision to develop innovative approaches that accelerate threat response and remediation and continuously refine incident response plans and threat-hunting methodologies.
  • Harden CAAT environments against AI/ML-based attacks; provide technical mentorship to junior security engineers and analysts; and clearly communicate security risks and mitigation strategies to stakeholders.
  • Lead the documentation of security incidents, technical project requirements, runbooks, and standard operating procedures to institutionalize knowledge across teams as an SME.
  • Ensure adherence to industry standards (ISO 27001, NIST, CIS, GDPR, SOC 2) and actively support security audits and regulatory compliance initiatives.
  • Communicate security risks and mitigation strategies to stakeholders, collaborate cross-functionally with IT, development, and operations to embed security across the organization, and manage multiple concurrent projects while applying strong analytical and problem-solving skills, working autonomously with excellent written and verbal communication.
  • Integrate secure coding practices into the SDLC; conduct SAST, DAST, and IAST; perform secure code reviews; and provide tailored remediation guidance to development teams.
  • Manage WAF and related security solutions against OWASP Top 10 threats (SQLi, XSS, insecure deserialization); enforce API security (authentication, authorization, encryption) alongside OAuth, JWT, and MFA; and conduct threat modeling and risk assessments to identify application weaknesses.
  • Embed security controls into CI/CD pipelines to automate vulnerability scanning and compliance checks; utilize SCA to track and mitigate third‑party dependency risks; implement secrets management to eliminate hardcoded credentials; and enforce zero‑trust principles across DevOps workflows.
  • Partner with development teams as an Application Security SME to foster a security‑first culture, promoting proactive ownership of security controls throughout software development.
  • Rapidly acquire skills in fast‑moving domains (AI, ML, Quantum); understand attacker exploit techniques and remediation methods; maintain expertise across infrastructure, network, endpoint, and mobile security; and provide technical mentorship to junior security engineers and analysts.

To Succeed, You Bring:

  • A minimum of eight (8) years of practical experience in various cybersecurity areas such Application Security, Vulnerability Management, Incident Response, Cloud Security.
  • A degree in the field of computer science.
  • A Relevant security certification such as CISSP, CCSP, Security+, CEH, CompTIA Security, etc.
  • Understanding of security standards and frameworks such as ISO27001, NIST and CIS, etc.
  • Strong knowledge of technical configurations from various operating systems and security solutions (Windows, Linux, Mac, IDS / IPS, DLP, SIEM, SOAR, WAF, VPNs, firewalls, encryption, etc.)
  • Excellent problem-solving and analytical skills to identify and resolve security issues effectively.
  • Excellent understanding of MITRE ATT&CK and MITRE ATLAS frameworks.
  • Good understanding of cloud security concepts and experience securing cloud-based infrastructure is an asset.
  • Proven project management and organizational skills, specifically managing multiple, concurrent projects.
  • Excellent written and verbal communication coupled with an ability to work with minimal supervision.

The target hiring salary for this position is $125,800 to $157,200. Placement within our salary range will be based on factors such as internal equity, market conditions, and the candidate’s experience, skills, and qualifications relevant to the role.

At CAAT, we believe innovation, passion, and purpose are ingredients for a great work environment. We’re incredibly proud of our people and the remarkable impact they have as catalysts for change. We’re committed to attracting and keeping great talent, which means competitive compensation, exceptional benefits, and an environment where people can grow and thrive. When you work with CAAT, you’ll enjoy:

  • Opportunities to Build a Better You: We never stand still. As we grow, so do you. Enjoy a place that provides endless opportunities to learn and master your skills while cultivating new ones.
  • Comprehensive & Holistic Care: Be at your best with a Total Rewards program that feeds and prioritizes your physical, mental, and financial wellness. From flexible work arrangements, comprehensive benefits to wellness incentives, and a defined benefit pension plan – we have you covered.
  • A Place to Collaborate and Win: We’ve built a lively environment where creativity and open communication thrive. It’s why we’re consistently recognized as one of ‘Canada’s Most Admired Corporate Cultures’, one of ‘Greater Toronto’s Top Employers’, and one of the ‘Best Places to Work’.
  • Work that Truly Matters. You’re giving Canadians the opportunity for better retirement security, and organizations the chance to do more.

If you believe that Canadians deserve a future where a secure lifetime retirement income contributes to their financial and overall well-being, then CAAT could be the right fit for you. Start your journey with us today. Apply now.

Learn more about us by visiting www.caatpension.ca/careers

No artificial intelligence tools are used to screen, assess, or select applicants for this position. Artificial intelligence tools may be used to help recruiters identify potential candidates on external platforms. All hiring decisions are made by human reviewers.

Diversity, Equity, Inclusion, and Belonging (DEIB):

DEIB at CAAT means we respect and value the broadest range of experiences, geographies, gender, ethnicities, backgrounds, and perspectives as key elements of our culture. Our vision is to provide an environment where employees can bring their best, professional, authentic, selves to work.

CAAT Pension Plan is an equal opportunity employer, and we will accommodate any needs under the Accessibility for Ontarians with Disabilities Act and the Ontario Human Rights Code. Hiring processes will be modified to remove barriers to accommodate those with disabilities, if requested. Should any applicant require accommodation through the application processes, please contact us at [email protected] or call Human Resources at 416-673-9000 for assistance.

Vacancy:

This posting is for an existing vacancy

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CAAT Pension's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CAAT Pension's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CAAT Pension's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.