Brampton On Soc analyst Jobs – 3 Openings This Week

Application Security Analyst
407 ETR —Woodbridge, ON
- $95,000–$115,000 a year
- Full-time
- Computer Science
- DevOps
- Engineering
6d
Sr. IT Security Analyst
407 ETR —Woodbridge, ON
- $115,000–$140,000 a year
- Full-time
- Azure
- Computer Science
- Engineering
Senior Analyst, Security
IMAX —Mississauga, ON
- $72,777.10–$90,971.10 a year
- Full-time
- Computer Science
- DevOps
- Analysis skills
13d

Discover related jobs

Based on your search for soc analyst jobs.

Analyst II, Security GRC
Moneris Solutions —Toronto, ON
Bachelor’s degree in Information Security, IT, Risk Management, or related field. Working alongside senior analysts, you’ll build hands-on experience with…
$66,000–$93,000 a year
Application Security SME – DevSecOps, OWASP, API Security, Checkmarx, Fortify
APPTOZA INC. —Toronto, ON
Bachelor’s degree in Computer Science, Information Security, Engineering, or related field. Promote a shift-left security approach to detect and remediate…
$75–$80 an hour
Quick apply

Show more related jobs

Explore jobs in cities nearby

Check out jobs in cities near your current location, Columbus

Information Security Analyst
CAA SCO Systems & Services Inc —Thornhill, ON
Continuous learning through our robust corporate curriculum and education reimbursement program,. At CAA Club Group, we are passionate about keeping our Members…
$49,500–$76,200 a year
Quick apply
Security Analyst - Security & Governance Compliance
Staples —Richmond Hill, ON
Diploma or degree in cybersecurity, IT, computer science, risk management, or a related field; equivalent experience may be considered. Some of what you need:
$73,900–$92,400 a year

Show more jobs in cities nearby

I want to receive the latest job alerts for soc analyst in brampton on

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

soc analyst jobs near brampton on

Senior Analyst jobs in Mississauga, ON

Research Analyst jobs in Ontario

Senior Analyst jobs in Calgary, AB

Junior Data Analyst jobs in Vancouver, BC

Senior Analyst jobs in Oshawa, ON

Senior Analyst jobs in Halifax, NS

Senior Analyst jobs in St. John's, NL

Business Analyst Banking jobs in Toronto, ON

Open Source Intelligence Analyst jobs in Ontario

Risk Analyst jobs in Calgary, AB

Application Analyst jobs in Waterloo, ON

Application Analyst jobs in Brampton, ON

Government Of Alberta Systems Analyst jobs in Edmonton, AB

Application Analyst jobs in Halifax, NS

Financial Analyst jobs in Winnipeg, MB

Business Analyst jobs in Windsor, ON

Application Analyst jobs in Mississauga, ON

Information Security Analyst jobs in Hamilton, ON

Rogers Arena, Security jobs in Vancouver, BC

Information Security Analyst jobs in British Columbia

Application Security Analyst

407 ETR -
Woodbridge, ON

Apply Now

Job details

Full-time
$95,000–$115,000 a year
6 days ago

Qualifications

Authentication
SSO
Computer Science
PCI
Enterprise software
DevOps
Engineering
Incident response
Bachelor's
Computer networking
ISO 27002
Network architecture
APIs
Security
IT
ISO 27001
SIEM
College diploma

Full job description

Title: Application Security Analyst

Department: Information Technology

Location: 6300 Steeles Ave West, Woodbridge

Total Potential Compensation: $95,000-$115,000

Position Summary:

As an Application Security Analyst, you will be responsible for supporting and operating core security capabilities across 407 ETR’s digital environment, with a primary focus on application security. This includes promoting secure-by-design practices throughout the SDLC and supporting the integration and operation of security tooling and automation, such as SAST, DAST, SCA, ASPM, and penetration testing services. You will work closely with Architecture, DevOps, QA, Product teams, and external partners to embed security controls into requirements, design, development, testing, and release activities, and track and manage security vulnerabilities through remediation. This role also contributes to improving the overall cyber and technology risk posture, with measurable improvements reflected in the Technology and Cyber Risk Indices (TRI/SRI).

Hours of work are onsite, Monday to Friday, 7.5 hours daily, or as required. After-hours support and on-call duties may be required for priority releases or security incidents.

Position Responsibilities:

AppSec Strategy & SDLC Integration

Embed security requirements and non‑functional controls into epics, features, and user stories; maintain security traceability throughout the lifecycle.

Lead threat modeling at design time for new and changed services (web, mobile, APIs, microservices) and ensure mitigations are implemented prior to coding.

Define and operate SDLC security gates (pre‑commit, build, test, deployment) with policy‑driven thresholds (e.g., fail on Critical/High) and exceptions governance.

DevSecOps Tooling & Automation

Implement and tune SAST, DAST, SCA and ASPM integrations within CI/CD, ensuring coverage, accuracy, and developer‑friendly feedback loops; coordinate PTaaS cycles aligned to release schedules

Partner with DevOps to secure build pipelines, artifacts, and environments (e.g., IaC scanning, container image hardening, secrets management, SBOM generation and validation)

Work with platform teams to evolve pipelines consistent with the 407 ETR DevOps framework and future‑state CI/CD models

Findings Management & Risk Reporting

Operate a unified findings intake (ASPM as system of record) for automated tool outputs and manual assessments; triage, prioritize, and track remediation to closure

Apply a risk‑based SLA model (severity, exploitability, asset criticality) and escalate overdue items; publish weekly triage outcomes and monthly KPIs.

Report AppSec posture using TRI/SRI aligned metrics (e.g., unresolved criticals, mean‑time‑to‑remediate, coverage, policy conformance)

Secure Engineering Enablement

Provide secure coding guidance, sample patterns, and remediation support for developers; deliver targeted training and office hours

Collaborate on architecture reviews, pen‑test scoping, and change risk assessments for web and mobile (using established change‑type workflow)

Contribute to AppSec policies/standards and improve documentation (playbooks, runbooks, “definition of done” security criteria)

Additional Technical Experience

Experience with Data Loss Prevention (DLP) technologies and controls, including policy configuration, monitoring, and incident investigation, is required

Experience with Single Sign-On (SSO) integrations and identity federation protocols is an asset.

Compliance & Vendor Management

Ensure controls align with PCI DSS Secure SDLC, ISO 27001/27002, and NIST DevSecOps guidance (e.g., SP 800‑204D); support internal/external audits and evidence collection

Manage AppSec vendor relationships and deliverables per the Application Security Managed Service scope (ASPM, PTaaS, continuous monitoring)

Note: This job description is not intended to be all-inclusive. The employee may perform other related duties, as assigned, to meet the ongoing needs of the organization.

Qualifications

Minimum 5+ years of experience in IT Security, with strong hands-on experience in Security Operations.
College Diploma or University Degree in Computer Science, Engineering, or related field.
EDR platforms (e.g., endpoint containment, alert triage, investigation).
NDR technologies and network-based threat detection.
Security Incident Response and Investigation.
Strong understanding of attacker techniques and defensive controls (MITRE ATT&CK).
Experience working in regulated or audit-driven environments.
Strong understanding of authentication, authorization, MFA, RBAC, and privileged access concepts.
SSO Authentication: Experience implementing and supporting SSO solutions for secure user access across enterprise applications.

Preferred Qualifications

Knowledge of standing up a mature Application Security framework
Experience with enterprise SOC tooling including SIEM, EDR, NDR, SOAR.
Experience operating security controls in hybrid (on‑prem and cloud) environments.
Familiarity with Security Risk Index (SRI), cyber risk metrics, or risk-based reporting.
Knowledge of network architecture and segmentation concepts.

We are actively seeking to fill this role as it is a current vacancy.

About 407 ETR

Highway 407 ETR is an all-electronic open-access toll highway located in the Greater Toronto Area in Ontario, Canada. The highway spans 108 kilometres from Burlington in the west to Pickering in the east.

407 International Inc. is the sole shareholder of 407 ETR and is owned by:

Cintra Global S.E., a subsidiary of Ferrovial S.A. (48.29%)
Canada Pension Plan Investment Board (CPP Investments) and other institutional investors with non-controlling interests (44.20%)
Public Sector Pension Investment Board (PSP Investments) (7.51%)

Learn more at 407etr.com

Note: At 407 ETR, we are committed to fostering a diverse, equitable, and inclusive work environment. We value the unique perspectives and backgrounds of all individuals, and we firmly believe that our individual differences make us stronger as a whole.

Our commitment to inclusion extends beyond recruitment and encompasses an inclusive workplace culture through raising awareness, ongoing training, and encouraging feedback. We aim to create a safe and supportive environment where all employees can thrive.

Accommodation for disabilities or other grounds protected by human rights legislation are available upon request for candidates taking part in all aspects of the employment selection process.

Apply Now

Refine Your Search

soc analyst jobs in brampton on

Application Security Analyst

Sr. IT Security Analyst

Senior Analyst, Security

Discover related jobs

Explore jobs in cities nearby

I want to receive the latest job alerts for soc analyst in brampton on

Explore jobs in more locations

Job seeker tools

Employer Tools

Browse

Stay Connected