Security coordinator Jobs in Toronto, ON

Penetration Testing Coordinator, Security Operations - Payments Client

Duration: 6 Months

Location: Etobicoke, Hybrid 3x/week

Overview:

We are seeking a Penetration Testing Coordinator to support an established Security Operations program and coordinate penetration testing engagements from intake through completion. This is not primarily a hands-on penetration testing role. The successful candidate will act as the central liaison between internal application and technology owners and external penetration testing vendors, managing scope, scheduling, testing readiness, results, remediation coordination, and retesting.

The environment already has a mature and well-defined penetration testing process. The key need is someone who combines strong organization and coordination skills with enough cybersecurity technical knowledge to understand testing requirements, validate information provided during intake, interpret penetration testing results, discuss vulnerabilities with technical stakeholders, and troubleshoot issues without requiring constant escalation to senior Security leadership.

Responsibilities:

• Coordinate penetration testing engagements end to end between internal stakeholders and external penetration testing vendors.
• Manage testing intake, scoping, scheduling, status tracking, and overall engagement coordination.
• Work closely with web application owners and other technology stakeholders to gather and validate the technical information required to properly scope testing.
• Coordinate web application, network, and PCI-related penetration testing, including network segmentation testing.
• Review testing requirements and intake information with enough technical understanding to identify gaps or inconsistencies before providing scope to external testing vendors.
• Ensure applications and environments are technically ready for testing and help troubleshoot access, configuration, or other minor issues that could delay execution.
• Review penetration testing reports and findings for completeness and clarity.
• Understand reported vulnerabilities sufficiently to determine the appropriate application, infrastructure, or technology owner responsible for remediation.
• Communicate and explain vulnerability findings to internal technical teams and application owners.
• Track findings and remediation activity through the appropriate stakeholders.
• Coordinate follow-up testing and retesting once vulnerabilities have been remediated.
• Maintain established penetration testing processes, trackers, and day-to-day operational workflows while identifying opportunities for incremental improvement.
• Manage a high volume of testing engagements across different areas of the organization and multiple external vendors.

Must Haves:

• 3 to 5+ years of relevant cybersecurity experience, ideally with experience coordinating penetration testing, vulnerability assessment, security testing, or closely related cybersecurity activities.
• Demonstrated experience coordinating activities between external security/testing vendors and internal application or technology teams.
• Strong understanding of penetration testing concepts and terminology across web applications and network/infrastructure environments.
• Ability to understand and interpret penetration testing reports, vulnerabilities, affected assets, and remediation requirements.
• Ability to determine the appropriate technical owner for security findings rather than simply forwarding reports or tickets.
• Sufficient technical knowledge to validate penetration testing intake and scoping information and engage credibly with penetration testers and technical application owners. The client specifically wants to improve on the current model where coordination is strong but technical validation still requires management intervention.
• Ability to discuss and explain vulnerabilities with technical stakeholders without relying on senior Security leadership to translate the findings.
• Strong organizational skills with demonstrated ability to manage multiple concurrent testing engagements, timelines, stakeholders, and follow-ups.
• Strong communication and stakeholder-management skills.
• Ability to independently troubleshoot minor technical or logistical issues preventing testing from proceeding.
• Comfortable working within an established, mature process and consistently maintaining the operational discipline required to keep testing engagements and remediation activities current.

Nice to Haves:

• CompTIA Security+ or comparable cybersecurity certification demonstrating a strong technical security foundation. The client specifically cited Security+ as an example of the level of technical grounding they would value.
• Previous experience working directly with third-party penetration testing vendors.
• Experience supporting PCI-related penetration testing or network segmentation testing.
• Previous experience in vulnerability management, application security, or a security operations environment.
• Prior technical cybersecurity experience that provides a strong understanding of vulnerabilities, systems, applications, and networks.