Competitive compensationwith a robust equity plan to share in our success.

Comprehensive coverage for health, dental, and vision insurance—including dependents.

Unlimited vacation, supportive parental leave policy,and company-wide holiday shutdown.

Semi-annual company-wide partiesand frequent in-office team events.

Relocation packagesavailable for approved roles.

$Fully stocked Toronto office kitchenwith snacks, drinks, games and top-notch kitchen appliances.

As Senior Infrastructure Security Specialist, you will protect Kepler’s corporate, cloud, and operational infrastructure. Reporting to the VP, Information Security & CISO, you will own and improve infrastructure security capabilities, including vulnerability management, security monitoring, endpoint protection, system hardening, and incident response. You will partner with IT, Engineering, Operations, and other teams to reduce security risk while supporting Kepler’s growth.

This Toronto-based role follows a hybrid mode, with approximately 40% of time spent on-site.

Infrastructure Security

Provide security expertise for infrastructure, cloud environments, networks, systems, databases, and identity technologies Review architectures and infrastructure changes to identify risks and recommend practical controls Develop secure configuration and hardening standards based on CIS Benchmarks, NIST guidance, and industry best practices Support network security controls, including firewalls, segmentation, secure remote access, and intrusion detection and prevention Partner with IT and Engineering to incorporate security into infrastructure design and operations Manage authenticated scanning, validate coverage, assess findings, and prioritize remediation based on risk Coordinate remediation with system owners and track vulnerabilities through resolution or approved risk acceptance Measure vulnerability exposure, remediation performance, scanning coverage,



and exceptions Security Monitoring and Endpoint Protection Own and improve Kepler’s SIEM, security monitoring, and EDR/XDR capabilities Integrate log sources and develop detection use cases across infrastructure, cloud, applications, identity, and security tools Investigate security alerts and support containment, remediation, and recovery Support incident investigations involving infrastructure, endpoints, networks, identity, and cloud environments Analyze security telemetry, collect evidence, and coordinate containment and recoveryAssess and improve security controls within AWS and/or Microsoft Azure Identify opportunities to automate monitoring, vulnerability management, and security operations using scripts, APIs, and security tools Implement technical controls for Government of Canada and other regulated environments Support audits, security assessments, inspections, certifications, and remediation activities Maintain documentation and evidence demonstrating that required security controls are operating effectively Seven or more years of cybersecurity experience in infrastructure security, security engineering, or security operations Strong knowledge of Windows, Linux, networking, cloud platforms, and enterprise IT security Strong hands-on experience administering and operating vulnerability management, SIEM/security monitoring, and EDR/XDR technologies Experience investigating and responding to cybersecurity incidents Knowledge of network security, infrastructure hardening,



identity and access management, privileged access, and least-privilege principles Experience securing AWS and/or Microsoft Azure environments Familiarity with NIST CSF, NIST SP 800-171, NIST SP 800-53, and CIS Controls and Benchmarks Ability to communicate technical risks and recommendations to technical and non-technical stakeholders Ability to obtain and maintain an appropriate Government of Canada security clearance Bonus Points: 10.171, the Canadian Program for Cyber Security Certification, and the Contract Security Program Experience with security audits, compliance activities, Python, PowerShell, Bash, APIs, or infrastructure as code Relevant certification such as CISSP, GIAC, CCSP, Security+, CISM, or CISA You will strengthen Kepler’s infrastructure security without unnecessarily slowing the business. Vulnerabilities will be effectively remediated, monitoring will provide appropriate visibility, incidents will be investigated quickly, and environments supporting sensitive government programs will meet applicable security requirements. $114,000 - 164,000 CAD Actual total compensation will be determined at the Company’s discretion and is based on a variety of job-related factors, which may include, but are not limited to, relevant knowledge, skills, experience, performance, and education and/or training.

Employment

Equity & Accommodation Statement Kepler Communications is an equal opportunity employer committed to building a diverse and inclusive workplace. We welcome applications from all qualified individuals, including women, Indigenous peoples, persons with disabilities, members of visible minorities, and people of all sexual orientations and gender identities. If you require accommodation during any stage of the recruitment process, please contact our People & Culture team at accommodation@kepler.

📌 Senior Infrastructure Security Specialist (Toronto)
🏢 Kepler Communications
📍 Toronto