Cloud Security Engineer

Grant Thornton; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

A leading professional services firm is seeking a Cloud Security Engineer in Toronto. In this role, you will advise on security practices, conduct risk assessments, and implement cloud security solutions, contributing to a culture of community and support. The position offers competitive benefits and opportunities for professional growth.

Benefits

Profit sharing

Flex days

Wellness benefits

Concierge benefits

Work from anywhere in Canada in summer for 4 weeks

Qualifications

• 3+ years of information security consulting and advisory experience.
• 5+ years of experience with Microsoft Azure Cloud Platform.
• Experience with ERM/GRC tools, threat assessments, and security testing methodologies.

Responsibilities

• Serve as an Information Security Advisor providing expertise related to new services and projects.
• Conduct security reviews and produce high-quality Threat Risk Assessment reports.
• Deploy and manage security solutions in cloud environments.

Skills

Analytical

Critical thinking

Communication

Education

Bachelor's degree in engineering, computer science, information systems, business, or related field

Tools

Microsoft Azure

Microsoft AAD

M365

Endpoint Manager

Job description

Who we are
You know those big cities that still feel like small towns? Where everyone’s friendly and helps each other out? That’s like Doane Grant Thornton. Except here we’re all professionals and there isn’t a mayor or a general store. What we’re trying to say is that we’re a large and growing professional services firm that still feels like a community. We employ over 3000 people across Canada, and we truly care about our colleagues, our clients and the communities where we work and live. That’s what’s most important to us. We’re building a thriving organization that’s purpose driven and still want to remember what your favourite milkshake flavour is.

Our special culture shines through when we have the opportunity to connect in person. That’s why we’re working in a model where teams are required to be together in the office 4 days per week.

As a Cloud Security Engineer, your responsibilities will include:

• Serve as an Information Security Advisor to various lines of business by providing subject matter expertise related to new services, products, and projects.
• Assess applications, infrastructure, business units, business processes, and external suppliers for information security risks, identifying potential threats and exposures.
• Conduct security reviews of planned initiatives across the organization and produce high-quality Threat Risk Assessment reports that clearly articulate risks.
• Demonstrate and apply strong project management, documentation, and communication skills.
• Serve as the subject matter expert on several production security technologies, staying abreast of emerging security support technologies and industry trends.
• Assist team lead with interpret requirements documents, architecture diagrams, solution designs, and other written and verbal information to determine if a project, application, infrastructure, or external supplier presents a security risk to DoaneGT.
• Provide recommendations to development and operational teams to address security weaknesses and identify potential new security solutions.
• Coordinate with Learning & Development on staff security training program.
• Conduct email phishing simulation testing and report analytics.
• Work with team lead on quarterly privileged access reviews and remediation workplans.
• Coordinate the annual IT Audit exercise with internal and external auditors.
• Respond to client security questionnaires.
• Assist with other cybersecurity-related tasks.

Additionally, you will:

• Assist in security and architecture reviews, understand engineering stacks, services, and data flows.
• Assist in designing, implementing, automating, and documenting security solutions and processes for Microsoft Azure, SaaS applications, and other cloud platforms.
• Deploy security solutions in cloud environments, including Microsoft Azure and M365.
• Assist and train team members in the use of cloud security tools and resolution of security issues.
• Research and maintain extensive knowledge of current cloud technology advancements, trends, and directions, identifying potential threats and exposures.
• Assist in investigating and remediating security incidents and issues.
• Create and support KPIs and KRIs that measure risk reduction and progress over time in the cloud.
• Help governance, compliance, and risk management teams ensure the system meets cybersecurity requirements.
• Act as a mentor across teams to enable a best-of-breed approach to cloud security and management.
• Protect systems from data breaches at all times.
• Monitor, operate, and improve system uptime, performance, high availability, and disaster recovery readiness.
• Collaborate with operational and development teams during triage and resolution of operational issues.
• Assist with other cybersecurity-related tasks.
• Deploy, monitor, and fine-tune SIEM solutions, threat hunting, security event analysis, and forensic investigations.
• Deploy, monitor, and manage vulnerability solutions.
• Manage and monitor security Web Broker cloud access solutions.
• Work closely with DevOps team and take a lead from Team Lead on security pen testing of the code.

About Doane Grant Thornton

If you’re a bit like us, you’re driven to connect with how others are feeling and thinking. Here we walk in others shoes before taking action. Just imagine being part of a team that puts “we before me”, where flexAbility is a mindset, and where you trust your colleagues to have your back. At Doane Grant Thornton, you’ll work with inspiring leaders who support your development, both personally and professionally. This is a place where your insatiable curiosity enables you to think, see and hear from a variety of perspectives, a place where every day is different and having the courage to grow is part of who you are. And when all this comes together, well that’s when the magic happens!

Learn more about us at www.discoveryourpurple.ca

Qualifications:

• Bachelor's degree in engineering, computer science, information systems, business, or related field.
• 3+ years of information security consulting and advisory experience.
• Certifications such as CompTIA Security+, Network+, GIAC Security Essentials (GSEC).
• Asset: CISSP, CCSP, CRISC, Ethical Hacker.
• 5+ years experience with Microsoft Azure Cloud Platform.
• 5+ years experience with Microsoft AAD, M365, Endpoint Manager.
• 3+ years experience with Endpoint solutions (Microsoft Defender).
• Experience with ERM/GRC tools, threat assessments, and security testing methodologies.
• Knowledge of security standards including ISO 27001 and NIST 2.0.
• Strong initiative, analytical, and critical thinking skills.
• Understanding of networking and stakeholder relationships.
• Ability to develop security metrics, KRIs, and KPIs.
• Excellent communication skills for reports and summaries.
• Ability to work under pressure and prioritize effectively.
• Knowledge of Microsoft M365 services and familiarity with Mimecast is preferred.
• Knowledge of Azure security configurations.
• Familiarity with IT auditing tools.

At Doane Grant Thornton, we’re focused on making a difference in the lives of our clients, colleagues, and communities. That’s our purpose. Or, as we like to say, living our purple.

What’s in it for you?

• Profit sharing, Flex days, RRSP contributions, Firmwide holiday closure, Wellness benefits, Concierge benefits, Work from anywhere in Canada in summer for 4 weeks, and more!

Ready to Discover Your Purple?

#LI-Onsite