What We Offer:* Competitive compensationwith a robust equity plan to share in our success.* Comprehensive coverage for health, dental, and vision insurance—including dependents.* Unlimited vacation, supportive parental leave policy,and company-wide holiday shutdown.* Semi-annual company-wide partiesand frequent in-office team events.* Relocation packagesavailable for approved roles.* $1,500 annual professional development fundto support your growth.* Fully stocked Toronto office kitchenwith snacks, drinks, games and top-notch kitchen appliances.* Town Halls, Celebration Calls, and Company-wide events to stay connected and engaged.* We’re a certified Outstanding Place to Work®, seven years in a row!As Senior Infrastructure Security Specialist, you will protect Kepler’s corporate, cloud, and operational infrastructure. Reporting to the VP, Information Security & CISO, you will own and improve infrastructure security capabilities, including vulnerability management, security monitoring, endpoint protection, system hardening, and incident response.You will partner with IT, Engineering, Operations, and other teams to reduce security risk while supporting Kepler’s growth. The role also supports regulated and Government of Canada environments that may process Protected or Classified information.This Toronto-based role follows a hybrid model, with approximately 40% of time spent on-site.Key Responsibilities:Infrastructure SecurityProvide security expertise for infrastructure, cloud environments, networks, systems, databases, and identity technologiesReview architectures and infrastructure changes to identify risks and recommend practical controlsDevelop secure configuration and hardening standards based on CIS Benchmarks, NIST guidance, and industry best practicesSupport network security controls, including firewalls, segmentation, secure remote access, and intrusion detection and preventionPartner with IT and Engineering to incorporate security into infrastructure design and operationsVulnerability ManagementOwn Kepler’s infrastructure vulnerability management programManage authenticated scanning, validate coverage, assess findings, and prioritize remediation based on riskCoordinate remediation with system owners and track vulnerabilities through resolution or approved risk acceptanceMeasure vulnerability exposure, remediation performance, scanning coverage,



and exceptionsAdminister platforms such as Tenable or equivalent technologiesSecurity Monitoring and Endpoint ProtectionOwn and improve Kepler’s SIEM, security monitoring, and EDR/XDR capabilitiesIntegrate log sources and develop detection use cases across infrastructure, cloud, applications, identity, and security toolsMonitor logging coverage, platform health, and detection effectivenessInvestigate security alerts and support containment, remediation, and recoveryCoordinate investigations and service improvements with Kepler’s MDR/SOC providerAdminister platforms such as Securonix, Sentinel One, or comparable technologiesIncident Response, Cloud and AutomationSupport incident investigations involving infrastructure, endpoints, networks, identity, and cloud environmentsAnalyze security telemetry, collect evidence, and coordinate containment and recovery Assess and improve security controls within AWS and/or Microsoft AzureIdentify opportunities to automate monitoring, vulnerability management, and security operations using scripts, APIs, and security toolsGovernment and Regulated EnvironmentsImplement technical controls for Government of Canada and other regulated environmentsSupport audits, security assessments, inspections, certifications, and remediation activitiesMaintain documentation and evidence demonstrating that required security controls are operating effectivelyRequired Skills & Qualifications:Seven or more years of cybersecurity experience in infrastructure security, security engineering, or security operationsStrong knowledge of Windows, Linux, networking, cloud platforms, and enterprise IT securityStrong hands-on experience administering and operating vulnerability management, SIEM/security monitoring, and EDR/XDR technologiesExperience investigating and responding to cybersecurity incidentsKnowledge of network security, infrastructure hardening, identity and access management, privileged access, and least-privilege principlesExperience securing AWS and/or Microsoft Azure environmentsFamiliarity with NIST CSF, NIST SP 800-171, NIST SP 800-53,



and CIS Controls and BenchmarksAbility to communicate technical risks and recommendations to technical and non-technical stakeholdersStrong ownership, problem-solving, organization, and cross-functional collaboration skillsAbility to obtain and maintain an appropriate Government of Canada security clearanceBonus Points:Experience with Tenable, Securonix, Sentinel One, or comparable platformsExperience working with an MDR, MSSP, or SOC providerExperience supporting Government of Canada contracts or environments handling Protected or Classified informationFamiliarity with ITSG-33, ITSP.10.171, the Canadian Program for Cyber Security Certification, and the Contract Security ProgramExperience with security audits, compliance activities, Python, Power Shell, Bash, APIs, or infrastructure as codeRelevant certification such as CISSP, GIAC, CCSP, Security+, CISM, or CISARelevant degree or an equivalent combination of education and professional experienceWhat Success Looks Like:You will strengthen Kepler’s infrastructure security without unnecessarily slowing the business. Vulnerabilities will be effectively remediated, monitoring will provide appropriate visibility, incidents will be investigated quickly, and environments supporting sensitive government programs will meet applicable security requirements.$114,000 - 164,000 CADActual total compensation will be determined at the Company’s discretion and is based on a variety of job-related factors, which may include, but are not limited to, relevant knowledge, skills, experience, performance, and education and/or training. The Company encourages all qualified applicants to apply, even if the posted salary range does not align with their expectations, as it does not reflect our total compensation package.Job Type: This is for a current vacancyEmployment Equity & Accommodation StatementKepler Communications is an equal opportunity employer committed to building a diverse and inclusive workplace. We welcome applications from all qualified individuals, including women, Indigenous peoples, persons with disabilities, members of visible minorities, and people of all sexual orientations and gender identities.If you require accommodation during any stage of the recruitment process, please contact our People & Culture team at, and we will work with you to meet your needs.#J-18808-Ljbffr

📌 Senior Infrastructure Security Specialist (Toronto)
🏢 Kepler Communications
📍 Toronto