Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
About the role
- Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Responsibilities
- Design, implement and maintain cloud security solutions to protect cloud-based systems and applications
- Implement and maintain robust security controls for cloud infrastructure and applications
- Discover, remediate and validate security issues across the cloud infrastructure
- Conduct architecture and design reviews from a security perspective and provide actionable requirements and recommendations
- Collaborate with security leadership, compliance and engineering teams to execute security strategies
- Build, deploy and manage security tools such as WAF, IDS/IPS, workload protection, GCP Security Command Center and Azure Security Center
- Propose and contribute to security and compliance improvements for CI/CD pipelines and deployment processes
- Automate infrastructure provisioning and deployment with IaC tools like Terraform or Pulumi
- Design and operate scalable processes for provisioning cloud access and upholding the principle of least privilege
- Participate in detection and incident response processes by improving observability and alerting
- Support first-party security audits and questionnaires
- Lead and oversee security assessments and threat-modeling exercises
- Implement security controls within Kubernetes
- Build DevSecOps tools and integrations
- Self-organize and prioritize activities autonomously
Requirements
- 5+ years of experience on an infrastructure- and/or security-focused team
- 5+ years of development experience, ideally with Go (GoLang) and TypeScript/JavaScript
- Knowledge of common web application vulnerabilities and the OWASP Top 10 framework
- Ability to analyze and act on results from DAST and SAST tools, including Tenable and Snyk
- Strong grasp of DevSecOps principles and familiarity with CI/CD pipelines, including GitHub Actions, Argo CD and Azure DevOps
- Experience deploying and customizing security tools: vulnerability scanners, static analyzers, WAF, IDS/IPS and endpoint security monitoring
- Deep understanding of cloud and network security, including Kubernetes
- Experience with GCP and one or more services such as Security Command Center, GKE, Cloud IDS, Cloud Armor and Secrets Manager
- Experience with Azure and one or more services such as Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door and Key Vault
- Experience writing infrastructure-as-code with Terraform, Pulumi and Helm
- Familiarity with security frameworks and benchmarks such as CIS, NIST and MITRE ATT&CK
- Understanding of IAM principles and cloud-native IAM solutions
- Passion for continuous learning and knowledge sharing
- Bilingual (English and French)
Benefits
- Employee mortgage program: exclusive preferred rates
- Comprehensive health coverage: top-tier extended coverage (health, dental, vision) with 100% drug coverage
- Access to a group retirement savings plan (RRSP/RPP) with competitive employer matching contributions
- Telemedicine and family support (top-up programs for maternity/parental leave)
- Flexible workplace: fully remote or at one of our offices (Montréal, Québec City, Toronto, etc.)
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
LP
Senior Security Engineer (Global Security)
LinkedIn Recruiter Post
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.
Senior security advisor simulating and mitigating cyberthreats for Desjardins, North America's largest cooperative financial group. Leading offensive security methodologies, tools and strategic initiatives.