Security director at Intact, an insurer, protecting customer and broker digital channels and third - party risk platforms. Leading technical teams, governance, strategy, and security operations.
About the role
- Information Security Engineer enhancing security controls and tooling for Trupanion, a vet insurance provider. Collaborating with IT and engineering teams to protect cloud and on-prem systems.
Responsibilities
- Engineer, operate, and continuously improve the Microsoft Defender security stack (e.g., Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Defender Vulnerability Management) to protect endpoints, identities, email, and cloud applications.
- Own and administer Privileged Access Management tool, including onboarding/offboarding privileged accounts, policy and workflow configuration, vault health, upgrades, and integrations.
- Integrate Defender and PAM signals with SIEM/SOAR and ITSM workflows to improve detection fidelity, reduce false positives, and accelerate response and remediation.
- Design and implement security engineering solutions across cloud and on-prem environments (primarily Azure/M365), including baseline hardening, configuration standards, and security control automation.
- Develop and maintain security tooling lifecycle management (health, licensing, capacity, performance, roadmap, and upgrades), ensuring resilient and supportable operations.
- Create and maintain detection engineering content: analytic rules/use cases, alert tuning, threat hunting queries, and automated response playbooks.
- Perform security assessments and vulnerability management, including scanning, prioritization, remediation tracking, and validation of fixes in partnership with IT and engineering teams.
- Partner with infrastructure, identity/IAM, and application teams to embed security controls into designs and delivery (secure-by-default patterns, CI/CD security checks, and least-privilege access).
- Respond to security incidents as an engineering escalation point—triage alerts, contain threats, coordinate remediation, and drive root-cause fixes and preventive controls.
- Produce clear, accurate, and up-to-date runbooks, procedures, and reference architectures for security tooling and operational processes.
- Support audits and regulatory exams by providing evidence, control narratives, and technical subject-matter expertise for implemented security controls.
- Stay current with emerging threats and Microsoft security capabilities; recommend and implement pragmatic improvements to Trupanion’s security posture.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
- 5+ years of hands-on security engineering experience supporting enterprise security platforms in Microsoft 365/Azure environments.
- Relevant certifications (one or more preferred): Microsoft Security (e.g., SC-200/SC-300/SC-100), AZ-500, CISSP, CISM, GIAC, or equivalent.
- Deep expertise securing Microsoft 365 and Azure, including identity, endpoint, email, and cloud security controls.
- Demonstrated experience administering Microsoft Defender components and/or XDR/SIEM platforms, including alert tuning, detection engineering, and incident response collaboration.
- Experience implementing or operating Privileged Access Management (CyberArk preferred) and integrating PAM with identity and security monitoring systems, including policy configuration, privileged session controls, onboarding/ offboarding, and operational troubleshooting.
- Strong hands-on experience with the Microsoft Defender stack (Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Defender Vulnerability Management) and associated investigation workflows.
- Experience with XDR/SIEM operations and integration (e.g., Microsoft Sentinel or equivalent): alert triage, tuning, threat hunting, and automation/playbooks.
- Strong identity and access management knowledge, including Entra ID (Azure AD), conditional access, MFA, least privilege, and role-based access control.
- Security engineering fundamentals across Windows, macOS, and Linux, plus network and cloud concepts (TLS, DNS, routing, segmentation, logging).
- Proficiency in scripting and automation (PowerShell and/or Python) to operationalize controls, integrate platforms, and improve reliability.
- Experience with vulnerability management and remediation workflows, including scanning, prioritization, validation, and reporting.
- Working knowledge of secure SDLC and DevSecOps practices, including CI/CD security checks, secrets handling, and infrastructure-as-code security.
- Familiarity with security frameworks and controls (NIST, CIS, ISO 27001) and translating requirements into implementable technical standards.
- Strong communication skills with the ability to explain security issues, tradeoffs, and remediation steps to both technical and non-technical stakeholders.
- Excellent problem-solving, analytical skills, and the ability to prioritize and deliver across multiple concurrent initiatives.
- Experience developing and maintaining runbooks, technical documentation, security guidelines, and reference architectures.
Benefits
- Employer-paid extended health coverage for you and your family
- Trupanion will partner with Wealthsimple to register your RRSP, pension, etc.
- Four weeks of paid time off and 11 paid float holidays (you can decide which days are most important to you!)
- Five weeks, paid, sabbatical after five years of employment
- Employer-paid medical insurance for one pet (cat or dog)
- Paid time off to volunteer at nonprofit organizations
- Open, casual, pet-friendly, and fun work environment
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Security Advisor strengthening Intact Insurance’s cyber - defense detection engineering. Building cloud security, threat detection, and scalable security solutions.
Information Security Advisor conducting cyber - risk assessments and contract reviews for Sun Life, a global financial - services company. Advising business and technology teams on security controls, compliance, and risk remediation.
Enterprise Security Architect securing technology for Vancity, a member - owned Canadian credit union. Designing enterprise application security frameworks, controls, and risk - based cybersecurity solutions.
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.