Cyber Security Specialist

Job summary

Design and mature a Continuous Threat Exposure Management program, including continuous vulnerability management, risk-based prioritization, and exposure analysis. Secure DevSecOps pipelines and AWS and Azure cloud environments by operating CSPM/CNAPP tools, integrating security scans, and implementing technical solutions with cross-functional teams.

Job details

Job Title: Security Specialist - Intermediate (Cyber Security) Location: Toronto (Hybrid - up to 3 days onsite per week) Contract Duration: 10 months Pay rate: $60-65 based on experience We are looking for a hands-on intermediate Security Specialist. In this operational role, you will focus on two core pillars: designing and maturing a Continuous Threat Exposure Management (CTEM) program, and driving DevSecOps pipeline security alongside Cloud Security Posture Management (CSPM/CNAPP) across AWS and Azure environments. If you excel at turning security insights into concrete technical solutions and working collaboratively across cross-functional teams, we want to hear from you! Must-Haves Continuous Threat Exposure Management (CTEM): Hands-on experience establishing or significantly contributing to a CTEM or continuous vulnerability management program, including risk-based prioritization and exposure analysis using tools like Microsoft Defender, Tenable, and Prisma Cloud. DevSecOps & Application Security: Proven experience integrating security scanning into CI/CD pipelines (SAST, DAST, SCA, container, and IaC scanning), collaborating with developers to remediate vulnerabilities, and promoting secure coding standards. Cloud Security & CSPM Operations: Strong expertise in AWS and Azure security controls, paired with operational experience managing a CSPM or CNAPP platform to identify misconfigurations and secure cloud workloads. Operational Execution: A strong technical background in cyber defense with a clear bias toward action—designing, deploying, and executing solutions rather than just providing recommendations. Nice-to-Haves Healthcare / Public Sector Experience: Prior background working within the healthcare sector or broader Ontario public sector. Advanced Tooling & AI: Familiarity with Microsoft Security Copilot and security automation agents for AI-assisted threat analysis and attack-path evaluation. Containerization & Architecture: Knowledge of Kubernetes security, microservices architecture, and modern cloud-native application practices. Certifications: Relevant industry credentials such as CISSP, CISM, GIAC, or Azure Security Engineer. Note: AI-enabled tools may be used to sort applications based on job-related criteria. All AI generated results are vetted by our team and the decision of which candidates move forward is always made by a human.

What you’ll do

Design and mature a Continuous Threat Exposure Management program, including continuous vulnerability management, risk-based prioritization, and exposure analysis. Secure DevSecOps pipelines and AWS and Azure cloud environments by operating CSPM/CNAPP tools, integrating security scans, and implementing technical solutions with cross-functional teams.

Requirements

Candidates need hands-on experience establishing or contributing to CTEM or continuous vulnerability management, using tools such as Microsoft Defender, Tenable, and Prisma Cloud. They also need experience integrating security scanning into CI/CD pipelines, collaborating with developers on remediation, and operating cloud security controls and CSPM/CNAPP platforms across AWS and Azure.

Listed skills

• management · Preferred
• Amazon Web Services · Preferred
• Microsoft Azure · Preferred
• Technical · Preferred
• Prioritization · Preferred
• Microsoft · Preferred
• analysis · Preferred
• CI/CD · Preferred
• Execution · Preferred
• Kubernetes · Preferred
• Microsoft Excel · Preferred
• Pipeline · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Continuous Threat Exposure Management
• Vulnerability Management
• Risk-Based Prioritization
• Exposure Analysis
• DevSecOps
• CI/CD Pipeline Security
• Application Security
• Secure Coding
• AWS Security
• Azure Security
• Cloud Security Posture Management
• CNAPP
• Container Security
• Infrastructure as Code Scanning
• Security Automation
• Kubernetes Security

Job areas

• Security & Safety
• Technology
• Software
• Government & Public Sector
• Healthcare

More jobs from Bevertec