Cloud Security Engineer

Position: Cloud Security Engineer

Location: Toronto, ON (Onsite)

Employment Type: Full-Time

Job Summary:

We are seeking a Cloud Security Engineer to secure Azure, AWS, and OCI environments. The role focuses on cloud security architecture, Microsoft Defender, Sentinel SIEM, network security, threat detection, incident response, and compliance . Strong multi-cloud security experience and knowledge of CIS, NIST, and ISO 27001 are preferred.

Key Responsibilities:

• Design and implement cloud security architecture across Azure, AWS, and OCI environments.
• Configure and manage Microsoft Defender for Cloud, Defender for Endpoint (Plan 2), and Sentinel SIEM.
• Implement and tune Azure Firewall, WAF policies (OWASP rules), and DDoS Protection.
• Manage AWS security services: Guard Duty, Security Hub, Inspector, AWS Config, and Macie.
• Configure OCI Cloud Guard, Security Zones, and VSS (Vulnerability Scanning Service).
• Enforce security baselines, CIS Benchmarks, and regulatory compliance controls (e.g., Ontario public sector).
• Implement EDR solutions and manage endpoint security posture across hybrid environments.
• Design and review network security: NSGs, Security Groups, Security Lists, NVA traffic inspection.
• Integrate SIEM/SASE solutions and support SOC operations with detection and response runbooks.
• Conduct security risk assessments, threat modelling, and architecture reviews.
• Prepare governance documentation, security artefacts, and executive-level security reporting.

Required Skills:

• 6+ years of security engineering experience with 3+ years in cloud (Azure, AWS, or OCI).
• Hands-on experience with Microsoft Defender for Cloud, Sentinel, and Defender for Endpoint.
• Strong knowledge of cloud-native security services across at least two major cloud providers.
• Experience with SIEM platforms, threat detection, and incident response.
• Understanding of network security: firewalls, WAF, IDS/IPS, and zero trust principles.
• Familiarity with compliance frameworks: CIS, NIST, ISO 27001, SOC 2.
• Microsoft Certified: Security Operations Analyst (SC-200) or Azure Security Engineer (AZ-500) preferred.
• AWS Security Specialty or OCI Security Professional a strong asset.

Nice to Have:

Experience with SASE vendors (Zscaler, Palo Alto Prisma, Netskope).