Cloud Security Engineer

Acestack; Toronto; On-site; CAD 110,000 - 160,000; Full time

Job summary

Acestack seeks a Full Time Cloud Security Engineer in Toronto, ON, onsite to design and implement security architecture across Azure, AWS, and OCI. You will configure Defender for Cloud, Defender for Endpoint, and Sentinel to detect threats and drive incident response.

The role requires hands-on cloud security across two providers and strong governance reporting. Responsibilities include implementing Azure Firewall, WAF policies, and security controls; managing GuardDuty, Security Hub, and

Qualifications

• 6+ years of security engineering experience.
• 3+ years of cloud security experience with Azure, AWS, or OCI.
• Hands-on experience with Microsoft Defender for Cloud, Sentinel, and Defender for Endpoint.
• Strong knowledge of cloud-native security services across at least two major cloud providers.
• Experience with SIEM, threat detection, and incident response.
• Strong understanding of firewalls, WAF, IDS/IPS, and Zero Trust principles.
• Knowledge of CIS, NIST, ISO 27001, and SOC 2 frameworks.
• SC-200 or AZ-500 certification preferred.

Responsibilities

• Design and implement cloud security architecture across Azure, AWS, and OCI.
• Configure Defender for Cloud, Defender for Endpoint Plan 2, and Sentinel SIEM.
• Implement Azure Firewall, WAF policies, CIS controls.
• Manage AWS GuardDuty, Security Hub, Inspector, Config, and Macie.
• Configure OCI Cloud Guard, Security Zones, and VSS.
• Enforce CIS, NIST, ISO 27001, and SOC 2 controls.
• Implement EDR solutions and hybrid endpoint security.
• Design and review NSGs, Security Groups, Security Lists, and NVA traffic inspection.
• Integrate SIEM/SASE solutions and support SOC operations.
• Develop detection and response runbooks.
• Conduct security risk assessments, threat modelling, and architecture reviews.
• Prepare governance documentation and executive-level security reporting.

Skills

Security engineering

Cloud security

Azure/AWS/OCI

SIEM / incident response

Zero Trust / network security

Compliance frameworks

Defender/Sentinel expertise

Tools

Microsoft Defender for Cloud

Sentinel

Defender for Endpoint

Azure Firewall

WAF policies

Job description

Role: Cloud Security Engineer
Employment: Full Time
Location: Toronto, ON
Work Arrangement: Onsite

Job Description

We are seeking a Full Time Cloud Security Engineer with strong experience designing and implementing security architecture across Azure, AWS, and OCI cloud environments

Key Responsibilities

• Design and implement cloud security architecture across Azure, AWS, and OCI
• Configure and manage Microsoft Defender for Cloud, Defender for Endpoint Plan 2, and Sentinel SIEM
• Implement Azure Firewall, WAF policies, OWASP rules, and DDoS Protection
• Manage AWS GuardDuty, Security Hub, Inspector, AWS Config, and Macie
• Configure OCI Cloud Guard, Security Zones, and VSS
• Enforce CIS Benchmarks, security baselines, and regulatory compliance controls
• Implement EDR solutions and manage hybrid endpoint security
• Design and review NSGs, Security Groups, Security Lists, and NVA traffic inspection
• Integrate SIEM/SASE solutions and support SOC operations
• Develop detection and response runbooks
• Conduct security risk assessments, threat modelling, and architecture reviews
• Prepare governance documentation and executive-level security reporting

Required Qualifications

• 6+ years of security engineering experience
• 3+ years of cloud security experience with Azure, AWS, or OCI
• Hands-on Microsoft Defender for Cloud, Sentinel, and Defender for Endpoint experience
• Strong knowledge of cloud-native security services across at least two major cloud providers
• Experience with SIEM, threat detection, and incident response
• Strong understanding of firewalls, WAF, IDS/IPS, and Zero Trust principles
• Knowledge of CIS, NIST, ISO 27001, and SOC 2 frameworks
• SC-200 or AZ-500 certification preferred
• AWS Security Specialty or OCI Security Professional certification is a strong asset

Nice to Have

• Experience with SASE solutions such as Zscaler, Palo Alto Prisma, or Netskope