Kinross Gold is seeking a Principal Security Architect to lead the design and continuous evolution of our incident response and cyber defense architecture. This is a senior, hands‑on‑yet‑strategic role: you will set the technical direction for how Kinross detects, contains, and recovers from threats across a global, hybrid workplace spanning corporate IT, cloud, and operating mine sites. Own the end‑to‑end architecture of the incident response capability — detection, triage, containment, eradication, recovery, and post‑incident review — across IT, cloud, and OT environments.

Design, develop, and continuously improve playbooks, escalation paths, and response automation (SOAR / agentic workflows), ensuring human oversight at decision points that carry material risk. Lead major and complex security incidents, providing senior technical authority and adversarial perspective when automated tooling reaches its limits.

Cyber Defense Design

Define the reference architecture for defensive controls: SIEM/analytics, EDR/XDR, identity protection, network segmentation, and cloud security posture. Establish detection engineering standards and validate AI‑ and analytics‑driven detections to prevent control gaps from over‑trusting automated output. Conduct threat modeling and attack‑path analysis against novel and AI‑driven threats, prioritizing creative problem solving over checklist‑driven, vendor‑led control selection.

AI Oversight & Governance Govern the responsible use of AI within the security function — setting guardrails for where automation is trusted, where human validation is mandatory, and how AI outputs are verified. Assess and secure the organization’s growing use of AI systems and agents as an emerging attack surface. Serve as a trusted advisor to security leadership,



translating technical threat and risk into business terms for non‑technical stakeholders.

Partner with cloud, infrastructure, enterprise architecture, and operational teams to embed security‑by‑design into digital and AI initiatives. Mentor and provide technical oversight to incident responders and analysts, pairing senior judgment with hands‑on coaching to keep core skills strong across the team.

Technical Skills Incident response & forensics: deep, hands‑on expertise across the IR lifecycle, including digital forensics, malware triage, log analysis, and root‑cause investigation.

Detection & response tooling: advanced command of SIEM, SOAR, EDR/XDR, and threat intelligence platforms; Cloud & hybrid security: strong working knowledge of securing cloud (Azure, AWS) and on‑premises environments, including identity, network segmentation, and cloud security posture management.

Threat & vulnerability management: proven ability in attack‑path analysis, adversary emulation, and vulnerability prioritization against both conventional and novel/AI‑driven threats. AI‑augmented security: ability to design, supervise, and validate AI‑ and analytics‑driven detection and response, and to secure AI systems and agents as an attack surface.

Architecture & engineering: skilled in security architecture design, and at least one scripting language (e.g., Python, PowerShell) for automation.

Sound judgment under pressure: calm, decisive leadership during active incidents, balancing speed with risk.

Communication & translation:



able to abstract complex security needs into clear business language for executives, the board, and non‑technical stakeholders. Cross‑functional influence: builds trust and drives alignment across IT, business, and operational teams without relying on direct authority.

Ethical stewardship: applies responsible judgment to AI oversight and high‑stakes risk decisions. 10+ years in cybersecurity, with significant depth in security architecture; senior incident‑handling experience required. Demonstrated adversarial thinking, threat modeling, and complex risk assessment. Excellent ability to abstract security needs from business direction and communicate to both technical and executive audiences.

Experience securing or governing AI/ML systems and AI‑augmented security operations.

Background in operational technology (OT) or critical infrastructure / industrial environments. GCIH, GCIA, GREM, CISSP, SABSA, cloud security certifications). Defensive architecture that adapts to novel threats rather than relying solely on compliance‑driven controls.

A team that uses AI to extend its reach while retaining sharp human judgment on the highest‑stakes decisions. The base salary range for this role is $145,000 to $170,000 CAD plus a target Short‑Term Incentive bonus of 25% and a 15% target Long‑Term Incentive and group benefit coverage. The actual offer will be determined through a comprehensive evaluation of each candidate’s experience, capabilities, and potential impact, along with consideration of internal equity, team structure, and benchmark market data for similar positions.

In addition to base salary, Kinross offers a comprehensive total rewards package designed to support employee well‑being, performance, and long‑term development. #

📌 Security & Risk Architect (Toronto)
🏢 Kinross Gold
📍 Toronto