Principal Security Architect

Start Date: ASAP Work Model: Hybrid

Location:
Downtown Toronto (outside Union Station – TTC & GO accessible) Dress Code: Business Casual A Great Place to Work Who We Are

Founded in 1993, Kinross is a Canadian-based senior gold mining company with operations and projects in the United States, Brazil, Mauritania, Chile and Canada. Our focus on delivering value is based on our four core values of Putting People First, Outstanding Corporate Citizenship, High Performance Culture, and Rigorous Financial Discipline. Mining responsibly is a priority for Kinross, and we foster a culture that makes responsible mining and operational success inseparable. Our values-based approach ensures that sustainability and our environmental, social and governance commitments are a core part of our strategy and plans for future growth. In line with our values, we also aim to build meaningful partnerships with all of our stakeholders, including communities, shareholders, employees, governments and suppliers. Kinross maintains listings on the Toronto Stock Exchange (symbol: K) and the New York Stock Exchange (symbol: KGC). Job Summary

Kinross Gold is seeking a Principal Security Architect to lead the design and continuous evolution of our incident response and cyber defense architecture. This is a senior, hands-on-yet-strategic role: you will set the technical direction for how Kinross detects, contains, and recovers from threats across a global, hybrid environment spanning corporate IT, cloud, and operating mine sites. This role is defined for the current threat landscape, where AI accelerates both attacks and defense. Routine design, documentation, and signature-based detection work is increasingly automated. Your value lies where automation cannot reach: adversarial thinking, complex risk judgment, validating AI-generated defenses, and translating threat reality into business decisions.

Key Responsibilities

Own the end-to-end architecture of the incident response capability — detection, triage, containment, eradication, recovery, and post-incident review — across IT, cloud, and OT environments. Design, develop, and continuously improve playbooks, escalation paths, and response automation (SOAR / agentic workflows), ensuring human oversight at decision points that carry material risk. Lead major and complex security incidents, providing senior technical authority and adversarial perspective when automated tooling reaches its limits. Cyber Defense Design Define the reference architecture for defensive controls: SIEM/analytics, EDR/XDR, identity protection, network segmentation, and cloud security posture. Establish detection engineering standards and validate AI
- and analytics-driven detections to prevent control gaps from over-trusting automated output. Conduct threat modeling and attack-path analysis against novel and AI-driven threats, prioritizing creative problem solving over checklist-driven, vendor-led control selection. AI Oversight & Governance Govern the responsible use of AI within the security function — setting guardrails for where automation is trusted, where human validation is mandatory, and how AI outputs are verified. Assess and secure the organization's growing use of AI systems and agents as an emerging attack surface. Strategic & Cross-Functional Influence Serve as a trusted advisor to security leadership, translating technical threat and risk into business terms for non-technical stakeholders. Partner with cloud, infrastructure, enterprise architecture, and operational teams to embed security-by-design into digital and AI initiatives. Mentor and provide technical oversight to incident responders and analysts, pairing senior judgment with hands-on coaching to keep core skills strong across the team. Technical Skills

Incident response & forensics: deep, hands-on expertise across the IR lifecycle, including digital forensics, malware triage, log analysis, and root-cause investigation. Detection & response tooling: advanced command of SIEM, SOAR, EDR/XDR, and threat intelligence platforms; able to architect, integrate, and tune them at enterprise scale. Cloud & hybrid security: strong working knowledge of securing cloud (Azure, AWS) and on-premises environments, including identity, network segmentation, and cloud security posture management. Threat & vulnerability management: proven ability in attack-path analysis, adversary emulation, and vulnerability prioritization against both conventional and novel/AI-driven threats. AI-augmented security: ability to design, supervise, and validate AI
- and analytics-driven detection and response, and to secure AI systems and agents as an attack surface. Architecture & engineering: skilled in security architecture design, and at least one scripting language (e.g., Python, PowerShell) for automation. Soft Skills

Adversarial thinking: the instinct to anticipate how an attacker behaves and to question assumptions that automated tooling