Staff Security Engineer securing Shakepay’s bitcoin financial - services platform and customer data. Advancing AI - driven security, observability, threat modeling, and incident response for Canadian users.
About the role
- Senior Cybersecurity Engineer joining Safe Fleet to enhance cybersecurity measures focusing on Azure cloud system. Leading cybersecurity initiatives to protect fleet safety platform from potential threats.
Responsibilities
- Lead, manage, and perform ongoing cybersecurity activities and related tasks, ensuring alignment with the Director of Cloud Engineering, Cybersecurity, and Compliance.
- Lead, define, and implement the vulnerability remediation program for applications (software & firmware) and cloud infrastructure.
- Maintain end-to-end visibility on the overall impact of remediation efforts.
- Design and implement industry standard technical security measures for software and cloud infrastructure, leveraging frameworks such as GovRAMP/StateRAMP, NIST 800-53.
- Liaison with SOC Team for ensuring real-time and accurate monitoring and reporting of prevention and detection activities.
- Identify opportunities for improvement in collaboration with the SOC team.
- Provide recommendations for initiatives to enhance the company’s cybersecurity and operational resilience.
- Review architecture and make recommendations for improvements and new solutions.
- Spearhead and design the end-to-end execution of the company’s Recovery Strategy.
- Lead the implementation of robust containment and eradication strategy for the Azure cloud platform and hosted applications.
- Design the Incident Response Plan for isolation of potential issues, implement mitigation and hardening measures.
- Implement data loss prevention measures in Azure to protect sensitive information.
- Manage identity and authentication measures in Azure and identify mechanisms to enhance security.
- Recommend solutions to suit business requirements and enhance measures for encryption of data in transit and at rest.
- Support management in periodic reporting of the cybersecurity posture and provide necessary evidence for the ongoing audits.
- Advise on implementation of cloud security measures, IAM, WAF, and MS Defender policies.
- Prepare and maintain comprehensive security reports, logs, and documentation.
- Knowledge of embedding security into the CI/CD pipeline and development processes utilizing GitHub Advanced Security.
- Gathering and utilizing threat intelligence to proactively defend the environment.
Requirements
- 5+ years of experience in leading diverse cybersecurity initiatives from design through implementation and adoption for applications and cloud infrastructure (Azure).
- Experience with Microsoft Azure, GitHub Advanced Security, SonarQube, MS Defender for Cloud, Zscaler, Tenable
- Experience with Jenkins, GitHub, Docker, and general workflow of CI/CD pipelines.
- Windows, Cloudflare, Kali, Linux, (automation)
- Experienced conducting penetration testing for applications, networks, and cloud infrastructure.
- Experience with Hardware devices or components is a good to have.
- Experience in analyzing vulnerabilities, conduct assessments, evaluating the environment for potential threats and experience with providing and implementing remediation solutions is expected.
- Knowledge with SIEM (Microsoft Sentinel) and EDR tools (SentinelOne)
- Solid knowledge of IAM, WAF, vulnerability management, and incident response
- Knowledge of DevSecOps practices and CI/CD integration
- Experience with forensic tools and disaster recovery planning
- Exposure to threat intelligence platforms and third-party risk tools
- Familiarity with security frameworks (NIST, ISO 27001) and regulatory compliance
- Knowledge of NIST CSF or NIST 800-53 is good to have (partial adoption)
- Familiarity with Jira and Confluence is nice to have.
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Ingénieur sécurité principal protégeant l'infrastructure, les produits et les données de Shakepay, plateforme canadienne de services financiers bitcoin. Automatisation, IA, détection et réponse aux incidents.
Senior Application Security Researcher advancing AI - driven application security from prompt to production. Building detection systems and autonomous agentic penetration - testing capabilities.
Senior UX designer supporting PwC Canada’s customer transformation engagements. Designing Salesforce Experience Cloud portals, journeys, prototypes, and accessible digital experiences.
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.