What We Offer:

* Competitive compensationwith a robust equity plan to share in our success.

* Comprehensive coverage for health, dental, and vision insurance—including dependents.

* Unlimited vacation, supportive parental leave policy,and company-wide holiday shutdown.

* Semi-annual company-wide partiesand frequent in-office team events.

* Relocation packagesavailable for approved roles.

* $1,500 annual professional development fundto support your growth.

* Fully stocked Toronto office kitchenwith snacks, drinks, games and top-notch kitchen appliances.

* Town Halls, Celebration Calls, and Company-wide events to stay connected and engaged.

* We’re a certified Great Place to Work®, seven years in a row

As Senior Infrastructure Security Specialist, you will protect Kepler’s corporate, cloud, and operational infrastructure. Reporting to the VP, Information Security & CISO, you will own and improve infrastructure security capabilities, including vulnerability management, security monitoring, endpoint protection, system hardening, and incident response.

You will partner with IT, Engineering, Operations, and other teams to reduce security risk while supporting Kepler’s growth. The role also supports regulated and Government of Canada environments that may process Protected or Classified information.

This Toronto-based role follows a hybrid model, with approximately 40% of time spent in office.

Key Responsibilities: Infrastructure Security

Provide security expertise for infrastructure, cloud environments, networks, systems, databases, and identity technologies

Review architectures and infrastructure changes to identify risks and recommend practical controls





Develop secure configuration and hardening standards based on CIS Benchmarks, NIST guidance, and industry best practices

Support network security controls, including firewalls, segmentation, secure remote access, and intrusion detection and prevention

Partner with IT and Engineering to incorporate security into infrastructure design and operations

Vulnerability Management

Own Kepler’s infrastructure vulnerability management program

Manage authenticated scanning, validate coverage, assess findings, and prioritize remediation based on risk

Coordinate remediation with system owners and track vulnerabilities through resolution or approved risk acceptance

Measure vulnerability exposure, remediation performance, scanning coverage, and exceptions

Administer platforms such as Tenable or equivalent technologies

Security Monitoring and Endpoint Protection

Own and improve Kepler’s SIEM, security monitoring, and EDR/XDR capabilities

Integrate log sources and develop detection use cases across infrastructure, cloud, applications, identity, and security tools

Monitor logging coverage, platform health, and detection effectiveness

Investigate security alerts and support containment, remediation, and recovery

Coordinate investigations and service improvements with Kepler’s MDR/SOC provider





Administer platforms such as Securonix, SentinelOne, or comparable technologies

Incident Response, Cloud and Automation

Support incident investigations involving infrastructure, endpoints, networks, identity, and cloud environments

Analyze security telemetry, collect evidence, and coordinate containment and recoveryAssess and improve security controls within AWS and/or Microsoft Azure

Identify opportunities to automate monitoring, vulnerability management, and security operations using scripts, APIs, and security tools

Government and Regulated Environments

Implement technical controls for Government of Canada and other regulated environments

Support audits, security assessments, inspections, certifications, and remediation activities

Maintain documentation and evidence demonstrating that required security controls are operating effectively

Required Skills & Qualifications:

Seven or more years of cybersecurity experience in infrastructure security, security engineering, or security operations

Strong knowledge of Windows, Linux, networking, cloud platforms, and enterprise IT security

Strong hands-on experience administering and operating vulnerability management, SIEM/security monitoring, and EDR/XDR technologies

Experience investigating and responding to cybersecurity incidents

Knowledge of network security, infrastructure hardening, identity and access management, privileged access, and least-privilege principles

Experience securing AWS and/or Microsoft Azure environments

Familiarity with NIST CSF, NIST SP 800-171, NIST SP 800-53, and CIS Controls and Benchmarks

Ability

📌 Senior Infrastructure Security Specialist (Toronto)
🏢 Kepler Communications
📍 Toronto