Lead Security Engineer – Cyber Platform Engineering at eqbank

eqbank

Toronto·9h ago

LeadFull-timeRustGitAPI

Salary Range

$153,000 - $207,000 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

You will own the organization’s web and application security capabilities, designing and optimizing controls to protect critical services from modern threats. This role strengthens the resilience of digital platforms and supports secure growth.

Key Responsibilities

→Own and lead the organization’s web security platform and its protection capabilities
→Implement and tune web security controls to reduce risk while maintaining performance
→Maintain platform standards, baselines, governance, and documentation
→Guide teams on secure onboarding of services
→Strengthen protections against common web/API threats and automated abuse
→Support DDoS readiness through runbooks and exercises
→Support security requirements for cloud migrations and platform changes
→Use logging/telemetry tools to investigate issues and support threat analysis
→Contribute to secure network architecture
→Provide direction on firewall and network protections
→Hands-on leadership and mentorship to more junior employees
→Advance web/API protection and detection maturity
→Improve cloud and container security posture
→Enhance DDoS readiness and operational preparedness
→Develop reusable, secure engineering patterns for cross team adoption

Requirements

✓Proven, hands-on experience with CDN, WAF, and API protection technologies
✓Strong command of web protection concepts and implementation
✓Extensive experience in security engineering with focus on web and application security
✓Demonstrated ability to operate as a hands-on technical lead
✓Strong understanding of network security architecture and common web/cloud attack vectors
✓Deep experience with at least one major cloud service provider
✓Working knowledge of container orchestration and container security
✓Solid background in firewall and network security
✓Experience conducting firewall rule-base reviews
✓Familiarity with cloud-delivered network protection models
✓Experience with email security and threat-detection tooling
✓Strong understanding of PKI, TLS, certificate lifecycle management
✓Excellent communication skills