Cloud Security Engineer-6

REALIGN LLC; Toronto; On-site; CAD 110,000 - 160,000; Full time

Job summary

REALIGN LLC is actively seeking a Full Time Cloud Security Engineer in Toronto to design and implement security across Azure, AWS, and OCI. The role requires hands-on cloud security architecture, SIEM, EDR, and regulatory compliance experience.

You will configure Defender for Cloud and Sentinel, implement Azure Firewall and DDoS protection, and manage AWS GuardDuty, Security Hub, Inspector, Config, and Macie. OCI Cloud Guard and Vulnerability Scanning are also part of the scope.

Qualifications

• 6+ years of security engineering experience with at least 3 years in cloud security.
• Hands-on experience with Microsoft Defender for Cloud, Sentinel, and Defender for Endpoint.
• Strong knowledge of cloud security services across at least two major cloud providers.
• Experience with SIEM, threat detection, and incident response.
• Strong understanding of firewalls, WAF, IDS/IPS, and Zero Trust principles.
• Knowledge of CIS, NIST, ISO 27001, and SOC 2 frameworks.
• SC-200 or AZ-500 certification preferred; AWS Security Specialty or OCI Security Professional is a strong asset.

Responsibilities

• Design and implement cloud security architecture across Azure, AWS, and OCI.
• Configure Defender for Cloud, Defender for Endpoint Plan 2, and Sentinel SIEM.
• Implement Azure Firewall, WAF policies, OWASP rules, and DDoS Protection.
• Manage AWS GuardDuty, Security Hub, Inspector, AWS Config, and Macie.
• Configure OCI Cloud Guard, Security Zones, and Vulnerability Scanning Service.
• Enforce CIS Benchmarks, security baselines, and regulatory compliance controls.
• Implement EDR solutions across hybrid environments.
• Design and review NSGs, Security Groups, Security Lists, and NVA traffic inspection.
• Integrate SIEM/SASE solutions and support SOC operations.
• Conduct security risk assessments, threat modeling, and architecture reviews.
• Prepare governance documentation, security artifacts, and executive security reports.

Skills

Security engineering

Cloud security

Defender for Cloud

Sentinel

Defender for Endpoint

SIEM

Threat detection

Incident response

Firewalls/WAF/IDS-IPS

Zero Trust

Compliance frameworks

Multi-cloud

Job description

Role: Cloud Security Engineer
Employment: Full Time
Location: Toronto, ON
Work Arrangement: Onsite

Job Description

We are seeking a Full Time Cloud Security Engineer with strong experience designing and implementing security solutions across Azure, AWS, and OCI cloud environments. The ideal candidate will have hands‑on expertise in cloud security architecture, SIEM, EDR, network security, compliance, and threat detection

Key Responsibilities

• Design and implement cloud security architecture across Azure, AWS, and OCI
• Configure and manage Microsoft Defender for Cloud, Defender for Endpoint Plan 2, and Sentinel SIEM
• Implement Azure Firewall, WAF policies, OWASP rules, and DDoS Protection
• Manage AWS GuardDuty, Security Hub, Inspector, AWS Config, and Macie
• Configure OCI Cloud Guard, Security Zones, and Vulnerability Scanning Service
• Enforce CIS Benchmarks, security baselines, and regulatory compliance controls
• Implement EDR solutions across hybrid environments
• Design and review NSGs, Security Groups, Security Lists, and NVA traffic inspection
• Integrate SIEM/SASE solutions and support SOC operations
• Conduct security risk assessments, threat modeling, and architecture reviews
• Prepare governance documentation, security artifacts, and executive security reports

Required Qualifications

• 6+ years of security engineering experience with 3+ years in cloud security
• Hands‑on experience with Microsoft Defender for Cloud, Sentinel, and Defender for Endpoint
• Strong knowledge of cloud security services across at least two major cloud providers
• Experience with SIEM, threat detection, and incident response
• Strong understanding of firewalls, WAF, IDS/IPS, and Zero Trust principles
• Knowledge of CIS, NIST, ISO 27001, and SOC 2 frameworks
• SC‑200 or AZ‑500 certification preferred
• AWS Security Specialty or OCI Security Professional certification is a strong asset

Nice to Have

• Experience with SASE platforms such as Zscaler, Palo Alto Prisma, or Netskope
• Experience supporting public‑sector security and compliance environments
• Strong communication and security documentation skills