Cyber Security Engineer

Apptoza Inc.; Montreal; On-site; CAD 85,000 - 120,000; Full time

Job summary

Apptoza Inc. in Montreal, Quebec seeks a security engineer to design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments.

You will monitor security events with SIEM/EDR, perform vulnerability assessments, and support incident response activities to detect, contain, eradicate, and recover from threats. Collaborate with infrastructure, cloud, application, and DevOps teams to strengthen security posture.

Qualifications

• Experience designing and implementing security controls across network, cloud, server, endpoint, and app environments.
• Strong knowledge of SIEM/EDR and security monitoring tools.
• Experience with vulnerability assessments, risk analysis, and remediation tracking.

Responsibilities

• Design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments.
• Monitor security events and investigate incidents using SIEM, EDR, and security monitoring tools.
• Perform vulnerability assessments, risk analysis, and remediation tracking.
• Support incident response activities, including threat detection, containment, eradication, and recovery.
• Configure and manage security technologies such as firewalls, IDS/IPS, WAF, DLP, IAM, and endpoint protection solutions.
• Conduct security assessments and recommend improvements to strengthen the organization's security posture.
• Collaborate with infrastructure, cloud, application, and DevOps teams to integrate security best practices.
• Assist in security audits, compliance assessments, and regulatory requirements (ISO 27001, NIST, SOC2, PCI-DSS, etc.).
• Develop and maintain security policies, procedures, and technical documentation.
• Stay current with emerging cyber threats, vulnerabilities, and industry security trends.

Job description

• Design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments.
• Monitor security events and investigate incidents using SIEM, EDR, and security monitoring tools.
• Perform vulnerability assessments, risk analysis, and remediation tracking.
• Support incident response activities, including threat detection, containment, eradication, and recovery.
• Configure and manage security technologies such as firewalls, IDS/IPS, WAF, DLP, IAM, and endpoint protection solutions.
• Conduct security assessments and recommend improvements to strengthen the organization's security posture.
• Collaborate with infrastructure, cloud, application, and DevOps teams to integrate security best practices.
• Assist in security audits, compliance assessments, and regulatory requirements (ISO 27001, NIST, SOC2, PCI-DSS, etc.).
• Develop and maintain security policies, procedures, and technical documentation.
• Stay current with emerging cyber threats, vulnerabilities, and industry security trends.