Trabajos a distancia y desde casa en toronto ∙ Página 5
2204 Trabajos a distancia y desde casa en línea
People Experience Specialist - Manufacturing & Distribution
Internal Job Board · Toronto, Canadá · Remote
People Experience Specialist - Manufacturing & Distribution
Lush Handmade Cosmetics · Toronto, Canadá · Remote
Information Security Engineer (Cloud) - Contract
Numeris · Toronto, Canadá · Hybrid
- Oficina en Toronto
Description
What you will do
-
Monitor and operate Cloud Security Posture Management (CSPM) tooling to identify high-priority misconfigurations, network exposures, and toxic risk combinations across AWS and Azure.
-
Continuously monitor and improve Microsoft Secure Score, driving actionable configuration enhancements across Entra ID, Defender, and Purview.
-
Partner directly with internal DevOps, Infrastructure, and Systems teams to translate posture findings into clear remediation tasks, track remediation timelines, and verify fixes.
-
Implement and maintain cloud hardening baselines, data boundaries, and security guardrails—including over-permissioning reviews and sensitivity controls supporting Microsoft 365 Copilot and multi-cloud environments.
-
Manage security intake by evaluating, triaging, and responding to day-to-day security requests, access exceptions, and technical risk inquiries from business and technical teams.
-
Perform technical cyber risk assessments for new vendors, cloud architectures, and third-party SaaS integrations.
-
Review proposed infrastructure and IT change requests (CAB) to evaluate security impacts, network perimeter exposure, and identity/access risks.
-
Document risks, track exceptions, and collaborate with system owners to establish practical compensating controls and standard operating procedures (SOPs).
-
Coordinate vulnerability management workflows: prioritize vulnerabilities using risk and exploitability context, assign remediation tasks to asset owners, and validate patches.
-
Provide operational administration for core security tooling (Defender suite, Entra ID, Purview, KnowBe4).
-
Author and maintain operational runbooks, security guidelines, and triage procedures to streamline day-to-day security workflows.
-
Support security operations with alert triage, investigation assistance, and operational incident follow-ups as needed.
What you have
-
3+ years of hands-on experience in cybersecurity, cloud security analysis, vulnerability management, or security operations (SOC/SecOps).
-
Direct operational experience working within Microsoft 365 security portals (Entra ID, Microsoft Defender, Purview).
-
Practical familiarity with AWS and/or Azure core security principles (IAM, security groups, resource hardening).
-
Proven experience managing security request intake, evaluating risk exceptions, and authoring standard operating procedures (SOPs), runbooks, and process documentation to improve operational consistency.
-
Demonstrated ability to collaborate constructively with internal technical teams (IT, DevOps, Engineering) to facilitate and track vulnerability/misconfiguration fixes.
-
Solid working understanding of Cloud Security Posture Management (CSPM) concepts and SaaS security hygiene.
-
Familiarity with identity security controls (MFA, Conditional Access, least-privilege RBAC).
-
Strong understanding of technical risk assessments, IT change management processes, and request ticketing workflows.
-
Baseline understanding of data protection and permission governance for modern AI productivity tools.
-
Collaborative Influence: Ability to build positive relationships with DevOps, IT, and software engineering teams, driving remediation through partnership rather than acting as a blocker.
-
Pragmatic Risk Prioritization: Strong analytical judgment to filter through alert noise, distinguish critical business risks from low-impact findings, and avoid "alert fatigue."
-
Clear & Empathetic Communication: Skill in translating technical cyber risks into clear, business-friendly language for non-technical stakeholders and system owners.
-
Curiosity & Adaptability: A proactive mindset for learning emerging platforms, evaluating new cloud features, and staying updated on evolving AI and SaaS security practices.
-
Organizational Discipline: Ability to juggle multiple intake requests, triage queues, and remediation follow-ups systematically without letting tasks slip through the cracks.
-
Microsoft SC-200, SC-300, or AZ-500
-
CompTIA Security+ or CySA+
-
AWS Certified Cloud Practitioner or Solutions Architect Associate