Senior Security Engineer

Join a Challenger

Being a traditional bank just isn’t our thing, so we challenge ourselves to get creative in providing innovative banking solutions for Canadians.

How do we get there? With a talented team of inquisitive and agile challengers that break through the status quo. So, if you’re passionate about redefining the future of banking—while having fun—this could be your next big opportunity.

Our company continues to grow, and today we serve more than 670,000 people across Canada through Equitable Bank, Canada’s Challenger Bank™, and have been around for more than 50 years. Equitable Bank’s wholly‑owned subsidiary, Concentra Bank, supports credit unions across Canada that serve more than six million members. Together we have over $125 billion in combined assets under management and administration, with a clear mandate to drive change in Canadian banking to enrich people’s lives.

Our customers have named our EQ Bank digital platform  one of the top banks in Canada on the Forbes World’s Best Banks list since 2021.

As a Senior Security Engineer with a strong Cloud Security background the candidate will have an in‑depth Zero Trust and SASE security model understanding. Cloud Logs Acquisition and Analysis, Cloud Investigations, Security Engineering & Architecture, Use Case Development, Playbook Development, SIEM Log Integration, Threat Detection Tuning are part of the job requirements.

• Provide detailed analysis and recommendations after monitoring security events from several sources, such as IDS/IPS, DLP, Anti‑Virus/Endpoint Protection, Network and web application firewalls.
• Examine, appraise, and interpret correlation metrics, develop dashboards, and reports.
• Tuning of rules, filters, and policies for detection‑related security technologies to improve accuracy and visibility.
• Akamai Web Application Security: engineering, deployment, integration, and operations of Web Application Firewall security solutions.
• Perform hands‑on Web Application Firewall deployment, configuration, policy fine‑tuning and maintenance.
• Improve and support application security tool deployments including static analysis and runtime testing tools.
• Protect enterprise pipeline on Azure Dev Ops, and integrate applications running on AKS, PCF and Docker using Aqua Security platform. Lead the security incident response by performing relevant investigation and forensic analysis of each incident and applying the necessary security mitigations.
• Train and educate Security staff, other Technology Group, and external business partners on Zero Trust Network Architecture.
• Manage SIEM elements such as Log collection, Normalization, Correlation, and Aggregation.
• Perform required compliance related activities and provide support for PCI DSS and other audit related requirements.
• Participate in new security solutions evaluation, design and implementation.
• Maintain documentation of tools, logic, policies, and procedures.
• Participate in security risks, threats and vulnerabilities assessment.
• On call, off‑hours and/or shift work will be required.

• Advanced degree in Computer Science or related field is highly preferred.
• A minimum of eight (8) years in an information security function or role.
• Experience with cloud security, including AWS, Azure, and Google Cloud Platform.
• Experience with security compliance frameworks such as ISO 27001, NIST, and SOC 2.
• CISSP or similar certification is preferred.
• Ability to work in a fast‑paced environment with minimal guidance and supervision.
• Extended experience in security solutions including SIEM, SOAR, Firewall, Web Proxy, and WAF.
• Expert in Strong Authentication, End Point Security, Internet Policy Enforcement, Web Content Filtering, Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) solutions, Secure Wi‑Fi.
• Ability to adapt to constantly changing technical, regulatory, and compliance environments.
• The incumbent is expected to interact with all employees including executives and thus good verbal and written skills are important.
• Experience working in a banking or financial services environment is an asset.
• Technical…