IT Security Officer overseeing information security for Desjardins’ property and casualty insurance sector. Managing risks, vulnerabilities, suppliers, complex projects, and executive security reporting.
About the role
- Security Operations Analyst monitoring and protecting Flexspring's HR data integration platform and cloud infrastructure. Managing vulnerabilities, incident response, detection tooling, and SOC 2/ISO 27001 evidence.
Responsibilities
- Provide continuous security monitoring, detection, and incident response for cloud infrastructure and the integration platform
- Monitor SIEM/EDR alerting and detection tooling; triage, investigate, and escalate confirmed security incidents
- Own vulnerability management end to end, from scan and penetration-test findings through remediation
- Follow up with technical owners across IT Ops, Cloud Engineering, and SRE
- Maintain and tune detection rules and alert logic to reduce false positives and close monitoring coverage gaps
- Act as secondary owner for security incident response alongside the Security & Compliance Lead
- Follow established Jira-based escalation protocols
- Support SOC 2 and ISO 27001 audit evidence collection
- Coordinate with Cloud Engineering and Integration Support/SRE teams during active incidents to determine root cause and scope
- Stay current on emerging threats, vulnerabilities, and cloud/SaaS/iPaaS security best practices
- Ensure AI-assisted triage or detection tooling complies with Flexspring's AI & R&D Safe Sandbox Policy
Requirements
- Bachelor's degree or College Diploma in Information Technology, Computer Security, Computer Science, or equivalent experience
- Practical experience with security monitoring tools (SIEM, EDR, or equivalent) and incident triage/investigation
- Working knowledge of vulnerability management processes (scanning, prioritization, remediation tracking)
- Familiarity with cloud infrastructure security fundamentals (AWS preferred): networking, IAM, logging
- Understanding of compliance frameworks such as SOC 2 and/or ISO 27001
- Strong analytical and documentation skills
- Comfortable working through Jira-based ticketing and escalation processes
- Security certifications (Security+, GSEC, GCIH, or equivalent) preferred
- Experience with AWS-native security tooling (GuardDuty, Security Hub, CloudTrail) preferred
- Exposure to SaaS/iPaaS environments or HR technology platforms preferred
- Scripting/automation experience (Python, or similar) to support detection tuning or reporting preferred
- Experience supporting external audits or penetration test coordination preferred
Benefits
- Work from home with flexible hours
- 4 weeks of paid vacation annually
- Comprehensive health benefits package for you and your family
- Team events and opportunities to connect with colleagues
- Opportunity to work with cutting-edge technologies
- Competitive base salary
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Azure SA&A Specialist supporting Government of Canada security assessments, controls, evidence, and testing. PLATO delivers Indigenous - owned software testing and technology services across Canada.
Senior Security Engineer owning identity, IT automation, and cloud security for Maze, a user research platform. Driving vulnerability management, compliance, and secure infrastructure at scale.
Product Security Engineer securing WorkOS developer tools and APIs for enterprise authentication and identity. Leading secure design, offensive testing, tooling, and vulnerability remediation.
Senior Manager leading BDO Canada’s cybersecurity governance, risk, and compliance programs. Overseeing audits, vendor risk, security policies, regulatory compliance, and GRC team leadership.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Senior Security Engineer protecting Kin’s cloud - based homeowners insurance platform. Owning endpoint detection, AWS security, identity controls, and incident response.
Remote HSE Specialist supporting JLL’s Canadian property - management operations. Managing compliance, investigations, audits, training, and environmental and safety programs.
Staff Product Security Engineer securing Phantom’s self - custodial multi - chain crypto wallet. Assessing vulnerabilities, leading security projects, and integrating protection across development and platform teams.
Cybersecurity co - op protecting TD’s banking technology, data, and fraud systems. Testing security solutions, operating tooling, and mitigating cyber and technology risks.