Cyber Security Engineer

At Momentum Financial Services Group, we help people move forward by reimagining how money works for those who need it most. With more than 40 years of experience, we’re the team behind Money Mart—Canada’s largest non-bank branch network—and a leader in financial solutions for underserved communities.

From short-term loans to money transfers and prepaid cards, we power the products, technology, and operations that connect over a million customers a year to the money they need, when they need it.

At MFSG, we come together across teams and departments to create something bigger than ourselves: solutions that remove barriers and give people access to money they might not get anywhere else. Whether you're solving problems, building systems, or shaping strategy, your work fuels real support for real people.

Reporting to the Senior Manager, Cyber Operations, the Cyber Security Engineer will be responsible for engineering, implementing, and continuously improving enterprise security controls and capabilities across multiple security domains.

• Design, implement, and optimize endpoint protection controls, threat detection, response processes, and hardening standards.
• Enhance email security capabilities, threat protection policies, detection mechanisms, and incident response workflows.

• Lead risk-based vulnerability discovery, assessment, prioritization, remediation tracking, and reporting.
• Partner with infrastructure, cloud, application, and business teams to drive timely remediation of security findings.

• Design, deploy, and maintain Secure Web Gateway (SWG), Proxy, CASB/SSE, and Cloud Security Posture Management (CSPM) controls.
• Strengthen SaaS and AI application visibility, data protection policies, governance processes, and exception management.

• Enhance AWS security guardrails across identity, networking, logging, data protection, and workload security.
• Embed secure configuration standards into cloud deployment and operational practices.

• Secure enterprise AI and GenAI solutions through monitoring, logging, data protection, control validation, and governance.
• Develop and tune SIEM detections, dashboards, alerts, SOC integrations, and automated security workflows.

• Support application security assessments, remediation governance, and secure development practices.
• Manage PKI/TLS certificate lifecycle processes, renewals, standards, and associated risk controls.

• Strong problem-solving skills with the ability to identify risks and implement practical security solutions.
• Passion for emerging cybersecurity challenges, including AI/GenAI security and security automation.
• Ability to collaborate effectively across Infrastructure, Development, Cloud, SOC, Risk, and Business teams.
• Strong communication skills with the ability to influence stakeholders and drive security best practices.
• Experience balancing multiple priorities in a dynamic and fast-paced environment.
• Continuous improvement mindset focused on strengthening security posture and operational efficiency.

• Bachelor's Degree in:
• Computer Science
• Cybersecurity
• Information Security
• Related technical discipline

Equivalent combination of education and experience will also be considered.

• Minimum 7 years of hands-on Security Engineering experience.
• Proven experience designing, implementing, tuning, troubleshooting, and optimizing security controls within large enterprise or regulated environments.
• Experience across:
• Endpoint Security
• Email Security
• Vulnerability Management
• AWS Cloud Security
• SIEM/SOC Engineering
• Application Security
• Certificate Lifecycle Management
• AI Security and Governance
• Strong experience partnering with technical and business stakeholders to drive security initiatives and remediation activities.

• Experience within Financial Services, Retail, or other regulated industries.
• Exposure to scripting and automation technologies.

One or more of the following certifications are considered strong assets:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CISA (Certified Information Systems Auditor)
• AWS Certified Security – Specialty
• GIAC Security Certifications
• Other relevant industry-recognized cybersecurity certifications

If you’re passionate about securing identities, improving access controls, and building scalable IAM solutions, this is an opportunity to make a critical impact on enterprise security.

The ideal candidate will demonstrate expertise in several of the following areas:

• Endpoint Detection & Response (EDR)
• Email Security Platforms
• Vulnerability Management Programs
• Secure Web Gateways (SWG)
• Security Service Edge (SSE)
• Cloud Access Security Broker (CASB)
• Cloud Security Posture Management (CSPM)
• AWS Security Services and Guardrails
• SIEM Engineering and Detection Development
• Security Monitoring and Alert Tuning
• AI/GenAI Security Controls
• Application Security Testing
• PKI/TLS Certificate Lifecycle Management
• Zero Trust Security Architecture
• Security Automation and Orchestration
• API Integrations
• PowerShell, Python, or similar scripting languages

MFSG is committed to accommodating applicants up to the point of undue hardship during the recruitment, assessment and selection process. If you are selected for an interview, please notify MFSG if you require accommodation in respect of the materials or procedures used at any time during this process. If you require accommodation, MFSG will work with you to determine how to meet your needs.

Please note: The salary range for this position is between C$ 142,000 to C$ 160,000.