Security Architect / Analyst / Engineer

Mississauga, ON – (Hybrid- 3 days in office)

9 months+ contract

1. Senior Security Architect

Primary focus: Security strategy, enterprise architecture, and executive influence.

Target experience: 10+ years in cybersecurity, including 5+ years in architecture roles; experience in enterprise-scale organizations.

What this person should be able to do

· Define enterprise security architecture standards and roadmaps.

· Review major technology initiatives and provide security design guidance.

· Lead architecture reviews across cloud, applications, infrastructure, and third-party solutions.

· Create security patterns, standards, and reference architectures.

· Drive Secure by Design initiatives and lead threat modeling for critical initiatives.

· Evaluate emerging technologies and associated risks.

· Influence technology and business stakeholders at director and executive levels.

Key technical / capability areas

· Strong AWS and Azure knowledge.

· Identity and access management (IAM).

· Network and application security.

· Executive communication and architecture review board experience.

What solid candidates will demonstrate

· Can connect security controls to business objectives.

· Embeds security early enough to prevent design-related issues.

· Communicates trade-offs clearly and credibly with senior stakeholders.

2. Security Architect

Primary focus: Solution design and project delivery.

Target experience: 5-10 years in cybersecurity.

What this person should be able to do

· Partner with project teams to design secure solutions.

· Conduct architecture and design reviews.

· Develop security requirements for projects and vendors.

· Perform threat modeling and risk assessments.

· Support cloud, application, and infrastructure initiatives.

· Work with engineers to implement security controls.

· Review vendor security architectures.

Key technical / capability areas

· Strong understanding of cloud, network,



infrastructure, and application security.

· Experience with security frameworks and best practices.

· Ability to balance risk with business and delivery requirements.

What strong candidates will demonstrate

· Provides timely, practical security guidance.

· Identifies and mitigates risk before production.

· Works as a partner to engineering and infrastructure teams rather than as a blocker.

3. Security Engineer

Primary focus: Build, implement, and operate security technologies.

Target experience: 3-8 years in cybersecurity or infrastructure engineering.

What this person should be able to do

· Deploy and maintain security platforms and configure/tune security controls.

· Implement automation and integrations between security tools.

· Support incident response investigations.

· Develop detection rules and monitoring capabilities.

· Manage cloud security controls and perform security testing/validation.

· Support vulnerability remediation efforts.

Key technical / capability areas

· SIEM: CrowdStrike Next-Gen SIEM, Microsoft Sentinel, Splunk or QRadar.

· SOAR platforms.

· EDR/XDR solutions.

· AWS and Azure security services.

· PowerShell and/or Python automation.

· IAM and vulnerability management tooling.

What strong candidates will demonstrate

· Strong troubleshooting ability.

· Hands-on experience implementing enterprise security solutions.

· Improves automation, reduces manual effort, and strengthens operational security.

4. Application Security Analyst

Primary focus: Secure software delivery, application risk reduction, and developer enablement.





What this person should be able to do

· Implement and govern Secure SDLC practices.

· Perform application security assessments and code review.

· Lead or support threat modeling.

· Operate or interpret SAST, DAST, SCA, and secrets-scanning capabilities.

· Provide developer security training and promote secure coding practices.

· Coordinate vulnerability management and remediation across application teams.

Key technical / capability areas

· Secure SDLC.

· Application security testing and code review.

· Threat modeling.

· SAST, DAST, SCA, and secrets scanning.

· Developer security education and remediation coordination.

What strong candidates will demonstrate

· Can translate findings into actionable guidance for developers.

· Understands both technical application risk and the software delivery lifecycle.

· Helps teams fix issues rather than only identifying them.

5. Security Operations Analyst / Engineer

Primary focus: Security monitoring, threat detection, investigation, response, and operational automation.

What this person should be able to do

· Monitor security events and support incident response.

· Develop and improve threat detection and investigation workflows.

· Work with SIEM and SOAR platforms.

· Develop playbooks and automation for repeatable response activities.

· Support endpoint and cloud security operations.

Key technical / capability areas

· SIEM and SOAR platforms.

· Threat detection and investigation.

· Incident response workflows.

· Playbook development and automation.

· Endpoint and cloud security operations.

What robust candidates will demonstrate

· Demonstrates analytical depth during investigations.

· Can tune detection and response processes to reduce noise and improve speed.

· Looks for opportunities to automate repeatable operational work.

Work Location: Hybrid remote in Mississauga, ON

📌 Security Architect / Analyst / Engineer (Mississauga)
🏢 Merican
📍 Mississauga