Full-Time

Senior Application Security Architect

Enterprise Technology

Updated on 9/4/2026

Onex

Onex

501-1,000 employees

Asset management across PE and credit

Compensation Overview

CA$115k - CA$130k/yr

Toronto, ON, Canada

In Person

Category
Cybersecurity (1)
Required Skills
LLM
Microsoft Azure
Python
JavaScript
Threat modeling
SQL
Java
Infrastructure as Code (IaC)
RAG
TypeScript
.NET
Vulnerability Analysis
C#
Cryptography
DevOps

Get referred to Onex

See people who can refer or advise you

Requirements
  • At least 7 years of relevant experience across application security, software or cloud engineering, DevSecOps, or cybersecurity, including significant application security or secure architecture experience.
  • Experience conducting security architecture reviews, threat modelling, and secure design assessments for modern applications, APIs, and cloud services.
  • Strong knowledge of secure software development lifecycle and application security controls, including identity and access, API security, secrets management, encryption, and data protection.
  • Strong coding and code-review skills in at least one modern programming language, with the ability to assess unfamiliar codebases.
  • Experience securing cloud applications across identity, networking, APIs, containers, managed services, and ingress.
  • Practical knowledge of DevSecOps and application security testing, including CI/CD controls, static application security testing, dynamic application security testing, software composition analysis, secrets scanning, and container security.
  • Ability to translate security risks into practical recommendations and influence stakeholders without direct authority.
Responsibilities
  • Define and maintain secure software development lifecycle, application security architecture, and production-readiness standards.
  • Establish risk-based review criteria and perform security reviews of internet-facing, sensitive-data, AI-enabled, and other high-risk applications and platforms.
  • Conduct threat modelling and architecture assessments covering applications, APIs, data flows, identity, cloud services, third-party dependencies, and deployment topology.
  • Perform targeted source-code reviews of security-critical areas, including authentication, authorization, input handling, data access, secrets, session management, and integrations.
  • Assess controls related to identity, API security, encryption, secrets management, network exposure and segmentation, logging, monitoring, and data protection.
  • Document and prioritize material risks and remediation, validate required controls, maintain review evidence, and route material exceptions through formal risk acceptance.
  • Develop reusable secure reference architectures, design patterns, checklists, and guidance for secure and supportable solutions.
  • Define and support automated security controls within CI/CD pipelines, including code, dependency, secret, container, and infrastructure-as-code scanning.
  • Assess open-source and third-party components for provenance, known vulnerabilities, patching practices, supportability, and licensing concerns.
  • Apply application, cloud, identity, data, and software supply-chain security principles to AI/LLM applications, self-hosted models, AI coding tools, and other emerging technologies.
  • Partner with cybersecurity, cloud services, infrastructure, analytics, development teams, and business stakeholders to provide guidance and support remediation while maintaining accountable ownership.
  • Support selected proofs of concept, validation testing, and post-deployment verification where hands-on technical involvement adds value.
Desired Qualifications
  • Experience with Microsoft Azure and Entra ID, including identity, secret management, networking, and application hosting.
  • Experience assessing AI/LLM applications, self-hosted models, or AI-assisted development; familiarity with Ollama, MCP, RAG, AI agents, or similar technologies.
  • Experience assessing open-source software, third-party dependencies, and software supply-chain risk, including vulnerability and patch management.
  • Financial services or other regulated-industry experience.
  • Relevant application security or cloud certifications.

Onex manages funds and client assets through three platforms: Onex Partners for private equity in the upper-middle market, ONEX Credit for a range of credit strategies, and Onex Private Wealth for customized solutions for high-net-worth individuals. Its private equity bets on partnerships with management teams to buy and grow businesses in areas like business services, financial services, and industrials, while its credit team runs strategies such as broadly syndicated loans and CLOs across North America and Europe. The firm combines its private equity, credit, and wealth capabilities in one group to offer coordinated investment options and aligned interests with clients. Its goal is to grow and preserve capital for investors by applying its long-term, multi-asset approach across regions.

Company Size

501-1,000

Company Stage

IPO

Headquarters

Toronto, Canada

Founded

1984

Get referred to Onex

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Q2 2026 fee-generating AUM reached $43.2 billion, up 6% year over year.
  • Convex's Q2 2026 premiums rose 8%, and Onex targeted $35 million FRE run-rate.
  • June 2026 AirSprint and April 2026 Mid-State deals expand aviation and industrial services exposure.

What critics are saying

  • Convex’s rate-sensitive marks exposed $50 million loss in Q1 2026, pressuring earnings.
  • PowerSchool settlement hearings continue through November 2026, keeping fiduciary-duty allegations public.
  • Onex’s stalled 2023 flagship fund history shows fundraising fragility if 2026 re-launch disappoints.

What makes Onex unique

  • Onex combines private equity, credit, and insurance under one capital allocator platform.
  • Onex Partners owns sector niches: aerospace, insurance, business services, plus upper-middle-market control deals.
  • Onex Credit raised $500 million for structured credit, deepening CLO and opportunistic expertise.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

401(k) Retirement Plan

Remote Work Options

Unlimited Paid Time Off

Flexible Work Hours

Hybrid Work Options

Wellness Program

Mental Health Support

Phone/Internet Stipend

Home Office Stipend

Professional Development Budget

Conference Attendance Budget

Family Planning Benefits

Company News

GlobeNewswire
Sep 3rd, 2026
Onex to present at the Scotiabank 27th Annual Financials Summit.

Onex to present at the Scotiabank 27th Annual Financials Summit. September 03, 2026 09:00 ET | Source: ONEX Corporation TORONTO, Sept. 03, 2026 (GLOBE NEWSWIRE) - Onex Corporation ("Onex") (TSX: ONEX) today announced that Bobby Le Blanc, Chief Executive Officer, will present at the Scotiabank 27th Annual Financials Summit on Thursday, September 10, 2026 at 1:15 p.m. ET. A live webcast of the presentation will be available on the Presentations and Events section of Onex' website at https://www.onex.com/events-and-presentations. A replay will be available on the same site following the event. About Onex Onex invests and manages capital on behalf of its shareholders and clients across the globe. Formed in 1984, we have a long track record of creating value for our clients and shareholders. Our investors include a broad range of global clients, including public and private pension plans, sovereign wealth funds, banks, insurance companies, family offices and high-net-worth individuals. In total, Onex has approximately $56.2 billion in assets under management, of which $9.5 billion is Onex' own investing capital. With offices in Toronto, New York, New Jersey and London, Onex and its experienced management teams are collectively the largest investors across Onex' platforms. Onex is listed on the Toronto Stock Exchange under the symbol ONEX. For more information on Onex, visit its website at www.onex.com. Onex' security filings can also be accessed at www.sedarplus.ca. For further information: Zev Korman Vice President, Shareholder Relations and Communications +1 416.362.7711

Royal Crescent Publishing Limited
Aug 7th, 2026
Onex raises $500M for second opportunistic structured credit fund

Canadian alternative asset manager Onex has raised $500 million for its second opportunistic structured credit fund at final close. The Onex Structured Credit Opportunities Fund II will invest globally in collateralised loan obligation equity and debt tranches, the Toronto-based manager said. "We are thrilled by the strong global investor demand for our opportunistic structured credit strategy, which reflects our team's performance and differentiated approach, while recognising the opportunities ahead in credit," said Ronnie Jaber, head of Onex Credit. The structured credit opportunities platform forms part of Onex's $32 billion credit business, which spans strategies including direct lending and CLOs. Overall, Onex manages $56 billion in assets across both equity and credit strategies.

GFM Limited
Jul 27th, 2026
Carlyle and Bain Capital in final race for $7bn Wealth Enhancement deal.

Carlyle and Bain Capital in final race for $7bn Wealth Enhancement deal. * July 27, 2026 * - 10:05 am Carlyle and Bain Capital are competing to acquire Wealth Enhancement, a US wealth management platform overseeing nearly $160bn in client assets, in a deal that could value the business at approximately $7bn including debt, according to a report by the Financial Times. The two private equity firms are the final bidders in a sale process launched by Wealth Enhancement's current owners, TA Associates and Onex, according to people familiar with the matter. The process is at an advanced stage, although there is no guarantee that a transaction will be completed. TA and Onex could ultimately decide to retain the asset, the sources said. Wealth Enhancement has expanded rapidly under its current private equity ownership, acquiring at least six smaller registered investment advisers since last year as it seeks to build scale. The company is one of the larger private equity-backed independent wealth managers in the US. Registered investment advisers, or RIAs, compete with banks and other financial institutions by providing investment advice to wealthy individuals and business owners in return for fees. The sector has attracted significant private equity interest because of its recurring revenues and relatively sticky client relationships. The potential transaction would follow a series of large deals in the wealth management industry. Mubadala Capital agreed an $8.8bn take-private acquisition of CI Financial last year, while Clayton, Dubilier & Rice acquired Focus Financial Partners for approximately $7bn in 2023. Other recent transactions include a minority investment by Advent International in Fisher Investments and TPG's investment in Creative Planning. The sector's appeal has also prompted concerns among some private equity executives that the market may be becoming overcrowded, with some longer-held investments failing to generate expected returns. Publicly listed wealth managers, including LPL Financial, have also faced valuation pressure this year amid growing investor concerns about the potential impact of artificial intelligence on the future provision of financial advice. TA Associates and Onex appointed Evercore to advise on the sale, according to the sources.

Ololand
Jun 27th, 2026
Private equity bets on luxury skies with AirSprint acquisition.

Private equity bets on luxury skies with AirSprint acquisition. Saturday, June 27, 2026 Private equity is betting big on the continued ascent of luxury travel. A consortium led by Onex Partners is acquiring AirSprint, Canada's largest fractional jet operator, in a landmark deal that signals major confidence in the future of the high-flying private aviation market. Audio Brief (2:47 listen) The private aviation sector, once a niche luxury, has soared into the mainstream for high-net-worth individuals and corporations in the post-pandemic era. This sustained demand, driven by a desire for convenience, safety, and efficiency, has not gone unnoticed by institutional investors. In a significant validation of the industry's long-term prospects, a consortium of private equity firms - led by Onex Partners and TriWest Capital Partners - has announced its acquisition of AirSprint, Canada's premier fractional private jet operator. This transaction is more than just a change of ownership; it signals a strategic bet on the enduring appeal of premium, on-demand travel and sets the stage for a new competitive dynamic in the North American skies. Anatomy of the deal. At the heart of this acquisition is AirSprint's unique and resilient business model. Unlike charter services that operate on a per-trip basis, AirSprint specializes in fractional ownership. This model allows clients to purchase a share in a specific aircraft, guaranteeing access to their jet or a comparable one with as little as 24 hours' notice. This structure creates a powerful combination of benefits highly attractive to private equity: * Recurring Revenue: Fractional ownership and jet card programs generate predictable, subscription-like revenue streams, insulating the business from the volatility of on-demand charter markets. * Customer Loyalty: The high-cost, high-commitment nature of fractional ownership fosters a "sticky" customer base with significant lifetime value. * Asset-Backed Security: The company's fleet of modern Cessna and Embraer jets represents a substantial tangible asset base, providing a degree of downside protection for investors. For the acquirers, the rationale is clear. Onex Partners brings deep aviation sector expertise, having previously owned and successfully managed major industry players like WestJet and Spirit AeroSystems. This experience will be invaluable in optimizing AirSprint's fleet management, maintenance operations, and route efficiency. TriWest Capital Partners, a firm focused on the Canadian mid-market, provides local expertise and a track record of scaling promising enterprises. Together, they form a powerhouse consortium poised to inject both capital and strategic oversight into AirSprint's operations. The strategic calculus and valuation context. While the financial terms of the deal remain private, the valuation was likely based on a multiple of EBITDA (Earnings Before Interest, Taxes, Depreciation, and Amortization), a standard metric for asset-heavy service businesses. In today's market, premier private aviation operators command robust multiples, buoyed by strong demand and a tight supply of new and pre-owned aircraft. This PE-led buyout contrasts sharply with the recent struggles of publicly traded competitors like Wheels Up, suggesting that private investors see long-term value that the public markets may be overlooking, free from the pressures of quarterly reporting. The strategic imperative for the new owners will be growth. The infusion of private equity capital will enable AirSprint to: * Accelerate Fleet Expansion: Address a growing waitlist of potential owners and increase capacity to serve existing clients by acquiring new, state-of-the-art aircraft. * Enhance Geographic Reach: Solidify its dominant position in Canada while making a more aggressive push into the lucrative U.S. market, particularly for cross-border travel. * Invest in Technology: Upgrade booking platforms, client management systems, and operational logistics to improve efficiency and the customer experience. For AirSprint's management, led by President and CEO James Elian who will remain with the company, the deal provides the resources to execute a long-term vision without the constraints of its previous ownership structure. Market implications. This acquisition sends ripples across the North American aviation landscape. First, it serves as a powerful endorsement of the fractional ownership model as the most stable and profitable segment within private aviation. Expect competitors to double down on similar offerings. Second, the deal positions a well-capitalized AirSprint to challenge the established duopoly of NetJets (owned by Berkshire Hathaway) and Flexjet in the cross-border market. With Onex's backing, AirSprint can now compete more effectively on fleet quality, service levels, and pricing, particularly for clients traveling between Canada and the United States. Finally, this transaction could spark a wave of consolidation. Smaller, regional operators may now find it more attractive to seek partnerships with private equity firms to remain competitive or become acquisition targets for a newly ambitious AirSprint looking to build a larger platform. The flight path ahead for AirSprint under its new ownership appears clear: aggressive, strategic expansion. The primary challenges will not be a lack of demand, but rather navigating persistent industry headwinds, including a global pilot shortage, aircraft production backlogs, and volatile fuel costs. However, the combination of a proven business model, a resilient customer base, and the strategic backing of seasoned aviation investors positions AirSprint not just to navigate these challenges, but to redefine the competitive altitude of luxury air travel in North America. Analyze your own CIM. Upload a CIM and get financials, risks, and valuation in seconds.

GlobeNewswire
Jun 25th, 2026
Onex Partners and Co-Investors to Acquire AirSprint, Canada’s Leader in Fractional Jet Ownership

Founder, CEO and select shareholders to remain investors as AirSprint enters its next chapter of growth...