Talent.com
Staff Security Engineer
Staff Security EngineerIndex Exchange • Toronto, ON, CA
Staff Security Engineer

Staff Security Engineer

Index Exchange • Toronto, ON, CA
26 days ago
Job type
  • Full-time
Job description

At Index Exchange, we’re reinventing how digital advertising works—at scale. As a global advertising supply‑side platform, we empower the world’s leading media owners and marketers to thrive in a programmatic, privacy‑first ecosystem.

We’re a proud industry pioneer with over 20 years of experience accelerating the ad technology evolution. Our proprietary tech is trusted by some of the world’s largest brands and media owners and plays a crucial role in keeping the internet open, accessible, and largely free.

We process more than 550 billion real‑time auctions every day (in comparison, Google processes 8.5 billion searches per day) with ultra‑low latency. Our platform is vertically integrated from servers to networks and runs primarily on our own metal and cloud infrastructure. This end‑to‑end infrastructure is designed to provide both stability and agility, enabling us to adapt quickly as the market evolves.

At the core of it all is our engineering‑first culture. Our engineers tackle internet‑scale problems across tight‑knit, global. From moving petabytes of data and optimizing with AI to making real‑time infrastructure decisions, Indexers have the agency and influence to shape the future of advertising. We move fast, build thoughtfully, and stay grounded in our core values.

About the role

We’re looking for a Staff Security Engineer / Security Architect to support our growing security team. This position reports directly to Director Enterprise Systems and Security based in New York and will work closely with members of the Technology Operations team.

What we’re looking for

  • You are analytically minded – you’re a problem solver.
  • You have strong written and verbal communication skills. You can articulate complex technical topics to diverse audiences.
  • You are highly collaborative – you work across the organization with a variety of stakeholders in order to get the job done.
  • You roll with the punches – you adapt to change.
  • You take ownership.

Here’s what you’ll be doing

  • Security Architecture & Design : Lead the design, implementation, and maintenance of scalable and effective security solutions across our global infrastructure, networks, and applications.
  • Threat Modeling & Risk Management : Conduct thorough threat modeling and risk assessments for new and existing systems. Identify vulnerabilities, assess potential impact, and recommend and implement mitigation strategies.
  • Vulnerability Management : Oversee and enhance the vulnerability management program, including scanning, penetration testing, and remediation efforts.
  • Security Operations & Incident Response : Lead and participate in incident response activities, including investigation, containment, eradication, and recovery. Develop and refine incident response plans and playbooks.
  • Tooling & Automation : Develop and implement automated security tools and processes to improve detection, prevention, and response capabilities.
  • Policy & Compliance : Contribute to the development, implementation, and enforcement of security policies, standards, and procedures. Ensure compliance with relevant industry regulations and frameworks (e.g., ISO 27001, SOC 2, NIST, GDPR, PCI DSS).
  • Secure Development Lifecycle (SDLC) : Work with software engineering teams to integrate security best practices into the software development lifecycle (SAST / DAST, SBOM, etc).
  • Mentorship & Technical Leadership : Provide technical guidance, mentorship, and subject matter expertise to other engineers and teams. Champion security awareness and best practices across the organization.
  • Research & Evaluation : Stay current with the latest cybersecurity threats, vulnerabilities, attack vectors, and industry best practices. Evaluate and recommend new security technologies and approaches.
  • Collaboration & Communication : Work effectively with cross‑functional teams (Engineering, Architecture, IT, Cloud Platform, Legal) to achieve security objectives. Clearly communicate complex security concepts and risks to both technical and non‑technical stakeholders.
  • Here’s what you need

  • Bachelor’s degree or higher in Computer Science, Cyber Security, Engineering, or equivalent experience.
  • 8+ years of experience working as a security engineer in a highly distributed, high‑transaction volume, low‑latency environment with a proven track record of designing, implementing, and managing complex security solutions in enterprise environments.
  • Strong experience securing both cloud and on‑prem environments comprised of a mix of bare metal, virtualized, and containerized workloads.
  • Strong proficiency with OS security hardening (Linux, Windows).
  • Strong understanding of network security (firewalls, IDS / IPS, WAF, VPNs, network segmentation, etc.).
  • Proficiency in application security concepts (OWASP Top 10, secure coding practices, SAST, DAST).
  • Proficiency in one or more scripting languages.
  • Experience with infrastructure‑as‑code, and infrastructure automation tools (Ansible, Puppet, etc).
  • Experience with identity and access management (IAM) solutions (e.g., SSO, MFA, PAM).
  • Experience with security information and event management (SIEM) systems and security orchestration, automation, and response (SOAR) tools.
  • Experience with Endpoint Detection & Response tools (EDR).
  • Experience with vulnerability scanning tools (Nessus, Qualys, etc).
  • Experience performing / leading penetration testing and engagements.
  • Knowledge of encryption technologies and PKI.
  • Understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes) and their security implications.
  • Why you’ll love working here

  • Comprehensive health, dental, and vision plans for you and your dependents.
  • Paid time off, health days, and personal obligation days plus flexible work schedules.
  • Competitive retirement matching plans.
  • Equity packages.
  • Generous parental leave available to birthing, non‑birthing, and adoptive parents.
  • Annual well‑being allowance plus fitness discounts and group wellness activities.
  • Commuter benefits and discounts, where available.
  • Employee assistance program.
  • Mental health first aid program that provides an in‑the‑moment point of contact and reassurance.
  • One day of volunteer time off per year and a donation‑matching program.
  • Bi‑weekly town halls and regular community‑led team events.
  • Multiple resources and programming to support continuous learning.
  • A workplace that supports a diverse, equitable, and inclusive environment – learn more here.
  • Equal employment opportunity

    At Index Exchange, we believe that successful products are built by teams just as diverse as the audience who uses them. As such, we are committed to equal employment opportunities. We celebrate diversity of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, or veteran status. Additionally, we realize that diversity is deeper than any status or classification—diversity is the human experience. For those who show grit, passion, and humility—Index will welcome you.

    Accessibility for applicants with disabilities

    Index Exchange welcomes and encourages individuals with disabilities to apply to work with us.

    If you require an accommodation, please share the details of your request and any information how we can assist you with the hiring recruiter when they contact you. Index Exchange will make reasonable efforts to ensure accommodation requests are met throughout the recruitment process.

    #J-18808-Ljbffr

    Create a job alert for this search

    Security Engineer • Toronto, ON, CA

    Similar jobs
    Staff Security Engineer

    Staff Security Engineer

    Fullscript • Toronto
    Full-time
    Toronto, Ontario, Canada – Salary : CA$125,000.About Fullscript : We’re an industry‑leading health technology company on a mission to help people get better. We started in 2011 with one simple idea – ...Show more
    Last updated: 3 days ago • Promoted
    Staff Security Engineer : AI & Platform Security Lead

    Staff Security Engineer : AI & Platform Security Lead

    Fullscript • Toronto
    Full-time
    A leading health technology company based in Toronto is seeking an experienced Staff Security Engineer to lead security initiatives across the organization. This role involves shaping the technical ...Show more
    Last updated: 3 days ago • Promoted
    Security Engineer

    Security Engineer

    ITCO Solutions, Inc. • Richmond Hill, Ontario, Canada
    Full-time
    What You Will DoWrite code to integrate services using vendor-supplied APIs.Write code to manage asset inventory.Write code to modify data records. Work with tech leads and project managers to commu...Show more
    Last updated: 1 day ago • Promoted
    Senior Security Engineer

    Senior Security Engineer

    Purpose LP • Toronto
    Full-time
    Led by entrepreneur Som Seif, the company is developing a diversified product platform aimed at addressing historically underserved segments of the market. Purpose Unlimited businesses include Purpo...Show more
    Last updated: 30+ days ago • Promoted
    Senior Staff Engineer - Product Security

    Senior Staff Engineer - Product Security

    Faire • Toronto
    Full-time
    Faire is an online wholesale marketplace built on the belief that the future is local — independent retailers around the globe are doing more revenue than Walmart and Amazon combined, but individua...Show more
    Last updated: 30+ days ago • Promoted
    Security Engineer II - Product Security

    Security Engineer II - Product Security

    Rippling • Toronto
    Full-time
    Rippling gives businesses one place to run HR, IT, and Finance.It brings together all of the workforce systems that are normally scattered across a company, like payroll, expenses, benefits, and co...Show more
    Last updated: 13 days ago • Promoted
    Industrial Site Security Lead

    Industrial Site Security Lead

    EBC Inc. • Toronto C6A, ON, Canada
    Full-time
    Be among the first 25 applicants.For more than 50 years, the building team has given life to countless construction projects, distinguished by the high quality of their work, meeting the highest st...Show more
    Last updated: 19 days ago • Promoted
    Staff Security Engineer, Defensive Cyber Engineering

    Staff Security Engineer, Defensive Cyber Engineering

    Okta for Developers • Toronto
    Full-time
    Staff Security Engineer, Defensive Cyber Engineering.Staff Security Engineer, Defensive Cyber Engineering.Okta is The World’s Identity Company. We free everyone to safely use any technology, anywher...Show more
    Last updated: 13 days ago • Promoted
    Datapower & Api Security Engineer

    Datapower & Api Security Engineer

    Scotiabank • Toronto, Canada, CA
    Full-time
    A leading bank in the Americas is seeking a skilled IBM DataPower Developer in Toronto to design, develop, and maintain secure integration solutions utilizing IBM WebSphere DataPower Gateway.The id...Show more
    Last updated: 13 days ago • Promoted
    Security Engineer - markham

    Security Engineer - markham

    ITCO Solutions, Inc. • markham, on, ca
    Full-time
    What You Will DoWrite code to integrate services using vendor-supplied APIs.Write code to manage asset inventory.Write code to modify data records. Work with tech leads and project managers to commu...Show more
    Last updated: 1 day ago • Promoted
    Staff Security Engineer, Defensive Cyber Engineering

    Staff Security Engineer, Defensive Cyber Engineering

    Okta • Toronto
    Full-time
    Staff Security Engineer, Defensive Cyber Engineering.Staff Security Engineer, Defensive Cyber Engineering.Okta is the world’s identity company. We free everyone to safely use any technology, anywher...Show more
    Last updated: 13 days ago • Promoted
    Principal Offensive Security Engineer - Ssdlc Lead - C$136,000 - C$160,000 A Year

    Principal Offensive Security Engineer - Ssdlc Lead - C$136,000 - C$160,000 A Year

    Autodesk, Inc. • Toronto, Canada, CA
    Full-time
    Offensive Security Engineer needed for Red Teaming, threat modeling, and penetration testing in the FinTech sector.Show more
    Last updated: 4 days ago • Promoted
    Senior Security Engineer, Insomnia

    Senior Security Engineer, Insomnia

    Kong Inc. • Toronto
    Full-time
    Senior Security Engineer, Insomnia.Get AI-powered advice on this job and more exclusive features.This range is provided by Kong Inc. Your actual pay will be based on your skills and experience — tal...Show more
    Last updated: 30+ days ago • Promoted
    Senior / Staff Application Security Engineer (Bangkok based, relocation provided)

    Senior / Staff Application Security Engineer (Bangkok based, relocation provided)

    Agoda • Toronto
    Full-time
    Senior / Staff Application Security Engineer (Bangkok based, relocation provided).Be among the first 25 applicants.At Agoda, we bridge the world through travel. Our story began in 2005, when two lifel...Show more
    Last updated: 1 day ago • Promoted
    Senior Security Engineer

    Senior Security Engineer

    EQ Bank | Equitable Bank • Toronto
    Full-time
    Senior Security Engineer with a strong Cloud Security background.The candidate will have an in-depth Zero Trust and SASE security model understanding. Responsibilities include Cloud Logs Acquisition...Show more
    Last updated: 30+ days ago • Promoted
    Hybrid Full-Stack Engineer : Cloud & Security

    Hybrid Full-Stack Engineer : Cloud & Security

    Nexus Systems Group Inc. • Toronto
    Full-time
    A leading technology consulting firm in Toronto is looking for an experienced Software Engineer for a hybrid role.The successful candidate will provide guidance on software development, engage with...Show more
    Last updated: 30+ days ago • Promoted
    Staff FPGA Design Engineer

    Staff FPGA Design Engineer

    Cognichip • Toronto C6A, ON, Canada
    Remote
    Full-time
    Be among the first 25 applicants.This range is provided by Cognichip.Your actual pay will be based on your skills and experience — talk with your recruiter to learn more. At Cognichip, we’re not jus...Show more
    Last updated: 12 days ago • Promoted
    Strategic Site Security Lead — Ops, KPIs & Team Growth

    Strategic Site Security Lead — Ops, KPIs & Team Growth

    Securitas Security Services USA, Inc. • Toronto C6A, ON, Canada
    Full-time
    A leading security services provider in Toronto is seeking a Site Security Lead to manage operations and ensure client satisfaction. The role involves setting operational goals, monitoring performan...Show more
    Last updated: 10 days ago • Promoted