Security Engineering Intern

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets.  United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.

We are seeking a Security Engineering Intern to join our Information Security team. In this role, you will collaborate with seasoned engineers to design, build, and automate security controls, helping protect our infrastructure and applications against emerging threats. Rather than shadowing, you will take ownership of a dedicated technical project—such as building security automation, integrating testing tools into CI/CD pipelines, or enhancing detection mechanisms—leaving a tangible impact on our security posture.

• Reports to: Manager, Security Engineering
• Job Location: Hybrid (2-3 days in office) - based in Toronto, ON.
  

Key Accountabilities

• Security Automation & Tooling: Develop, deploy, and maintain automated tools and scripts to streamline security workflows, vulnerability scanning, and routine security tasks.
• Security Benchmarking & Posture: Assist in evaluating application and cloud infrastructure configurations against recognized industry security standards and benchmarks (e.g., CIS, OWASP).
• Architecture & Code Reviews: Actively participate in security architecture discussions, threat modeling sessions, and code audits alongside senior engineering teammates.
• Telemetry & Detection Engineering: Analyze security telemetry and support efforts to refine detection alerts, enhance monitoring, and update incident response playbooks.
• Documentation & Presentation: Document technical findings, develop clear architectural diagrams, and present a capstone internship project to engineering leadership.

Must Have(s)

• Currently pursuing a Bachelor’s, Master’s, or equivalent degree in Computer Science, Cybersecurity, Information Systems, or a related technical discipline.
• Foundational understanding of core information security concepts (e.g., cryptography, authentication/authorization, OWASP Top 10, network protocols).
• Practical coding or scripting experience in at least one modern programming language (such as Python, Go, Java, C/C++, or JavaScript).
• Comfort and familiarity working in Unix/Linux command-line environments.
• Foundational exposure to or hands-on experience with cloud platforms (AWS, GCP, or Azure).
• Strong natural curiosity about emerging technology and security practices, paired with effective written and verbal communication skills.

Nice to Have(s)

• Familiarity with containerization tools (Docker, Kubernetes) and CI/CD pipeline automation (GitHub Actions, GitLab CI).
• Working knowledge of common web application vulnerabilities and practical defensive mitigation techniques.
• Demonstrated passion outside the classroom, such as security research, open-source contributions, or active membership in university cybersecurity clubs/CTF teams.

Notes:

• 4 month Co-op Internship: January 11, 2027 to April 30, 2027
• In order to be considered for the position, you are required to submit your Knockri Assessment

Salary Range: $20.00/hour - $23.00/hour CAD . Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

The recruiting efforts for this role are intended to fill a vacant position.

For this role AI-assisted tools are utilised as one input in the application and screening process. AI does not make final hiring or interview decisions.

Please note that our company is not currently sponsoring work permit applications and the applicant must be authorized to work in the country where this position is located. 

TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.