Senior Cyber Security Engineer

Join to apply for the Senior Cyber Security Engineer role at Haventree Bank.
Haventree Bank is a private Canadian Schedule 1 bank specializing in alternative mortgage programs and insured GIC deposits. We help hardworking Canadians from coast-to-coast achieve homeownership by offering flexible mortgage solutions. Our insured GIC deposits offer competitive rates and are available through various wealth management platforms.
About Haventree Bank
Headquartered in Toronto, Ontario, Haventree Bank (Haventree) is a mission-driven alternative mortgage lender. The name Haventree symbolizes the bank's mission to help customers find refuge and establish new roots. Haventree aims to foster financial security and upward mobility for Canadians underserved by traditional financial systems.
Position Summary
Reporting to the Director, Information Security, the Senior Cyber Security Engineer will ensure customer-facing applications are secure throughout the SDLC. They will utilize their expertise in cloud security, CICD tools, and application security testing to enhance our platforms' security posture. The candidate will bridge development, operations, and security teams to embed security into every stage of software delivery.
Major Duties & Responsibilities

Assess and improve CI/CD pipelines for security best practices, ensuring compliance.
Lead and support DAST and SAST efforts for web and mobile applications, identifying and remediating vulnerabilities early.
Advise on cloud infrastructure security best practices for Azure (preferred) or AWS, ensuring configurations are secure and compliant.
Enhance security configurations for our Customer Identity and Access Management (CIAM) platform to ensure secure access and privacy compliance.
Collaborate with development and DevOps teams to incorporate security recommendations into the development lifecycle.
Monitor applications and systems for compliance with regulatory standards (OWASP, NIST, CIS, etc.).
Develop roadmaps and recommendations for cloud security architecture, governance, and standards, including DevSecOps, Zero Trust, and incident response.
Perform security reviews and maturity assessments, providing clear risk findings and recommendations.
Stay updated on security threats, trends, and technologies to proactively mitigate risks.

Qualifications & Experience
Degrees, Diplomas & Certifications

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
Relevant certifications such as CCSP, CEH, OSCP, Azure Security Engineer, AWS Security Specialty, CISSP are desirable.

Experience

Minimum 5+ years in cloud security, with at least 2 years in a Senior Security Engineering role focused on cloud platforms and pipelines.
Extensive experience with CI/CD tools like GitHub, Terraform, SonarCloud, Snyk.
Deep knowledge of Azure (preferred) or AWS security configurations.
Proven expertise in DAST and SAST for applications, integrating them into CI/CD pipelines.
Strong understanding of API security principles and third-party API assessment.
Experience with IAM solutions like Auth0, focusing on customer identity security.
Experience building and maintaining cloud-native SIEM solutions such as Microsoft Sentinel.
Solid software development foundation to assess code vulnerabilities.
Excellent collaboration and communication skills to work across teams.
Knowledge of security frameworks (OWASP, NIST, CIS) and compliance standards (PIPEDA, OSFI, SOC 2).

Note: Only candidates selected for an interview will be contacted. Haventree Bank is committed to accessibility and diversity. Please contact us if accommodations are needed during the recruitment process.
•