This role is central to maintaining and evolving a resilient security posture across complex IT environments. You will work at the intersection of security architecture and engineering, driving technical improvements that directly impact detection, response, and prevention capabilities.
Key Responsibilities
- Diagnose and resolve performance challenges arising from security tooling deployments.
- Design and refine integrations between security systems and core IT infrastructure to improve automation and operational efficiency.
- Build and maintain scripts and automated workflows to enforce security standards and enhance monitoring.
- Support evaluation of emerging technologies through hands-on testing and proof-of-concept projects focused on integration and scalability.
- Respond to urgent security events by analyzing alerts, determining scope, and guiding remediation efforts.
- Partner with IT teams to strengthen system hygiene, ensure coverage of critical assets, and eliminate visibility blind spots.
- Support incident response activities including containment, communication coordination, threat eradication, and system recovery.
Qualifications
You bring at least five years of hands-on cybersecurity engineering experience, with a strong foundation in securing both cloud and on-premises systems across Windows and Linux platforms. You are familiar with Office 365 security controls and have direct experience with EDR, NDR, SIEM, and related technologies.
Proficiency in scripting on Windows and Linux (PowerShell, Python, Bash) is required, along with practical knowledge of network protocols, application security, firewalls, intrusion detection, and endpoint protection. Experience with cloud infrastructure as code (IaC) and securing IaaS, PaaS, and SaaS environments is essential.
You must be able to obtain a reliability-level security clearance in Canada.
Preferred Background
- Familiarity with security frameworks such as ISO27001, CMMC, or TISAX/VAD maturity models.
- Knowledge of Zero Trust principles and scalable security architectures.
Technical Environment
You'll work with a range of tools including EDR, endpoint privilege management, NDR, SIEM, internal PKI, vulnerability scanners, and cloud IaC platforms, supporting both MacOS and Windows endpoints, and Linux and Windows servers.
Work Location
This position supports flexible work arrangements within Canada, with options to work remotely or from offices in Calgary or Vancouver.
