Information Security Engineer overseeing security tools and policies for a global remote company. Lead efforts in enhancing security posture and compliance in a fast-growing organization.
Responsibilities
Act as the Subject Matter Expert (SME) for Endpoint Detection and Response (EDR) tools/process including optimizing configurations/policies, developing custom threat detection rules, and proactively improving Deel’s overall security posture for remote endpoints (Mac and Windows) and cloud assets (Eg, VMs).
Configure, manage, and tune the full suite of security policies within SWG, CASB and ZTNA. Assist our remote colleague with seamless experience through troubleshooting end user issues as needed.
Continuously improve SaaS security posture with SSPM tools and processes around it. Collaborate with diverse application owners, understand security control and resolve configuration drifts for our wide range of SaaS applications from baseline.
Develop a rigorous review, approval, policy enforcement and auditing for browser extensions, third party OAuth applications for SaaS applications such as Google Workspace, GitHub, Jira etc to meet security and privacy standards.
Design, implement, and audit security policies related to enterprise browsers (Eg, Island, Chrome Enterprise etc) including controlling access to sensitive web apps, and data loss prevention (DLP) configuration, ZTNA, secure web browsing experience but not limited to.
Manage DLP policies across Endpoint, Network, SaaS Applications and Cloud assets, directly supporting the "Crawl-Walk-Run" program phases. Ensure DLP policies meet diverse data sovereignty, privacy (GDPR, CCPA, etc.), and national regulatory requirements.
Run vulnerability management programs for endpoints and servers and ensure they are patched according to the policy in collaboration with stakeholders.
Requirements
5+ years of experience in cybersecurity
Handson experience with security tools like EDR, SWG, CASB, ZTNA and DLP
Familiarity with cybersecurity frameworks and best practices, such as MITRE, NIST, CIS, ISO27001, SOC and others.
Experience in collaborating with internal stakeholders to rollout enterprise security solutions.
Understanding and having the ability to utilize Cloud platforms such as AWS, GCP, Azure to host security tooling. Having experience in utilizing SIEM to query security telemetry is a plus.
Experience managing secure email gateway is a plus.
Excellent English in both verbal and written.
CISSP is a plus
Benefits
Stock grant opportunities dependent on your role, employment status and location
Additional perks and benefits based on your employment status and country
The flexibility of remote work, including optional WeWork access
Consultant cybersécurité hybride à Montréal chez I - TRACING, pure - player indépendant en sécurité informatique. Conception, déploiement et support de solutions IAM, réseau, systèmes et applications.
Desjardins property technician supporting fire prevention, building safety, management, and build - out projects. Providing technical support, process coordination, user training, and operational guidance.
Ingénieur sécurité principal protégeant l'infrastructure, les produits et les données de Shakepay, plateforme canadienne de services financiers bitcoin. Automatisation, IA, détection et réponse aux incidents.
Senior Application Security Researcher advancing AI - driven application security from prompt to production. Building detection systems and autonomous agentic penetration - testing capabilities.
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.