IT Information Security Lead at Mirego, responsible for technology and information security management. Overseeing compliance and IT strategies while maintaining operational efficiency.
About the role
- Senior Cybersecurity Engineer joining Safe Fleet to enhance cybersecurity measures focusing on Azure cloud system. Leading cybersecurity initiatives to protect fleet safety platform from potential threats.
Responsibilities
- Lead, manage, and perform ongoing cybersecurity activities and related tasks, ensuring alignment with the Director of Cloud Engineering, Cybersecurity, and Compliance.
- Lead, define, and implement the vulnerability remediation program for applications (software & firmware) and cloud infrastructure.
- Maintain end-to-end visibility on the overall impact of remediation efforts.
- Design and implement industry standard technical security measures for software and cloud infrastructure, leveraging frameworks such as GovRAMP/StateRAMP, NIST 800-53.
- Liaison with SOC Team for ensuring real-time and accurate monitoring and reporting of prevention and detection activities.
- Identify opportunities for improvement in collaboration with the SOC team.
- Provide recommendations for initiatives to enhance the company’s cybersecurity and operational resilience.
- Review architecture and make recommendations for improvements and new solutions.
- Spearhead and design the end-to-end execution of the company’s Recovery Strategy.
- Lead the implementation of robust containment and eradication strategy for the Azure cloud platform and hosted applications.
- Design the Incident Response Plan for isolation of potential issues, implement mitigation and hardening measures.
- Implement data loss prevention measures in Azure to protect sensitive information.
- Manage identity and authentication measures in Azure and identify mechanisms to enhance security.
- Recommend solutions to suit business requirements and enhance measures for encryption of data in transit and at rest.
- Support management in periodic reporting of the cybersecurity posture and provide necessary evidence for the ongoing audits.
- Advise on implementation of cloud security measures, IAM, WAF, and MS Defender policies.
- Prepare and maintain comprehensive security reports, logs, and documentation.
- Knowledge of embedding security into the CI/CD pipeline and development processes utilizing GitHub Advanced Security.
- Gathering and utilizing threat intelligence to proactively defend the environment.
Requirements
- 5+ years of experience in leading diverse cybersecurity initiatives from design through implementation and adoption for applications and cloud infrastructure (Azure).
- Experience with Microsoft Azure, GitHub Advanced Security, SonarQube, MS Defender for Cloud, Zscaler, Tenable
- Experience with Jenkins, GitHub, Docker, and general workflow of CI/CD pipelines.
- Windows, Cloudflare, Kali, Linux, (automation)
- Experienced conducting penetration testing for applications, networks, and cloud infrastructure.
- Experience with Hardware devices or components is a good to have.
- Experience in analyzing vulnerabilities, conduct assessments, evaluating the environment for potential threats and experience with providing and implementing remediation solutions is expected.
- Knowledge with SIEM (Microsoft Sentinel) and EDR tools (SentinelOne)
- Solid knowledge of IAM, WAF, vulnerability management, and incident response
- Knowledge of DevSecOps practices and CI/CD integration
- Experience with forensic tools and disaster recovery planning
- Exposure to threat intelligence platforms and third-party risk tools
- Familiarity with security frameworks (NIST, ISO 27001) and regulatory compliance
- Knowledge of NIST CSF or NIST 800-53 is good to have (partial adoption)
- Familiarity with Jira and Confluence is nice to have.
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
EC
Cybersecurity Specialist focusing on offensive security for Exposant 3. Performing penetration testing, security audits, and team knowledge transfer in a hybrid work setup.
Financial security advisor in life and health insurance, developing and maintaining client relationships. Selling insurance products and assessing customer needs to provide personalized solutions.
Senior Security Engineer designing and maintaining Microsoft 365 security solutions at ResMed. Focusing on compliance, incident response, and collaboration with global teams.
Senior Infrastructure professional solving practical security challenges and improving enterprise systems security at Confluence. Focused on implementation, remediation, and secure operations across Windows and Linux environments.
Senior infrastructure professional responsible for vulnerability remediation and security improvements across enterprise systems at Confluence. Hands - on role involving Windows and Linux environments with strong collaboration with Cybersecurity team.
Enterprise Security Architect responsible for implementing information security best practices at SecureOps. Collaborating with clients to analyze networks and provide effective security solutions.
Health, safety, and environment advisor responsible for maintaining compliance and promoting safety practices. Supporting project teams and developing SSE programs to manage risks in the workplace.
Security Consultant I focusing on compliance and audit within TELUS Health, conducting risk assessments and collaborating with various departments.
LP
Threat Modeler, Security Architect with Development
LinkedIn Recruiter Post
Hiring Threat Modeler, Security Architect with Development background for full - time permanent role in Toronto, ON. Must have AI/ML, cloud - native, and threat modeling expertise.