Cybersecurity Engineer

Buckland; Canada; Remote; CAD 90,000 - 115,000; Full time

Benefits offered by this job

Competitive salary

Matched retirement plan

Professional development

Remote work

Collaborative culture

Job summary

Buckland is seeking a proactive Cybersecurity Engineer to design, build, and maintain the security posture of our IT environments. This role looks beyond monitoring to identifying risk, strengthening systems, and leading response efforts when issues arise.

You’ll bridge security operations, IT, and governance, monitoring threats and architecting tools and controls that prevent incidents while ensuring uptime and resilience. Remote options are available for non-local applicants.

Qualifications

• Bachelor’s degree or equivalent practical experience in information security or related field.
• 5+ years in cybersecurity operations, security engineering, or industrial network security.
• Hands-on with SIEM and EDR tools; knowledge of vulnerability management.
• Networking knowledge: firewalls, IDS/IPS, segmentation, and secure connectivity.
• Experience with Windows, Linux, and ICS architectures; scripting preferred.
• Cloud familiarity (Azure/AWS) and Zero Trust concepts.
• Security certifications such as CompTIA Security+, GIAC, CISSP or CISM preferred.

Responsibilities

• Security Operations & Incident Response including monitoring and triage.
• Lead incident response activities: containment, eradication, recovery, and root-cause.
• Deploy and manage security technologies; tune SIEM/SOAR for better visibility.
• Support governance, risk & compliance; ISO 27001 audits and controls.
• Drive security awareness, training, and a security-friendly culture.
• Collaborate with infrastructure, cloud, and app teams to embed security.
• Oversee third-party security assessments and vendor risk.
• Continuously evaluate new security tools and methodologies.

Skills

SIEM

EDR

Incident response

Firewalls

Network segmentation

Zero Trust

Cloud security

Vulnerability management

Scripting

Windows/Linux

Threat monitoring

ISO 27001

Education

Bachelor’s degree in information security, Computer Science, Engineering, or related field

Tools

Rapid7

Microsoft Sentinel

Sophos

Defender for Endpoint

FortiGate

Palo Alto

Azure

AWS

Job description

Buckland is looking for a Cybersecurity Engineer

What you’ll be doing

We are seeking a proactive Cybersecurity Engineer to design, build, and maintain the security posture of our IT environments. This is not a purely reactive monitoring role, we’re looking for professionals who identifies risk before it becomes an incident, strengthens our systems continuously, and leads response efforts when issues do arise.

You’ll operate at the intersection of security operations, IT, and governance, monitoring and responding to threats, while also architecting the tools, controls, and processes that prevent them in the first place. The Engineer will monitor, design, and optimize security measures, troubleshoot issues, and implement best practices to strengthen the company’s digital footprint.

What we can offer you

• Competitive, salary, benefits package, and matching retirement plan.
• Compensation range: $90,000–115,000 annually (subject to experience)]
• A friendly, collaborative work environment.
• Opportunities for professional development & ongoing learning.
• A chance to be part of a growing organization.
• Remote work arrangement is available for applicants who are not local to a Buckland office.

You will be responsible for

• Security Operations & Incident Response:
• Monitor security alerts and incidents across IT using SIEM and EDR tools
• Perform triage, investigation, and escalation of detected security events
• Lead incident response activities; containment, eradication, and recovery
• Conduct root cause analysis following incidents and drive corrective actions
• Maintain clear, thorough documentation of incidents, findings, and remediation steps
• Security Engineering & Tool Management:
• Deploy, configure, and maintain security technologies: firewalls, endpoint protection, network segmentation, and vulnerability scanners
• Tune detection and automation rules within SIEM/SOAR platforms to improve visibility and response times
• Partner with IT and business units to balance operational uptime with security best practices
• Governance, Risk & Compliance:
• Lead and support implementation of cybersecurity standards, including ISO 27001
• Lead ISO 27001 audits, compliance reporting, and control testing
• Contribute to development and enforcement of security policies, procedures
• Maintain the risk register, perform risk assessments, and track mitigation progress
• Design and implement Zero Trust principles across network and cloud systems
• Awareness & Culture
• Support rollout of company-wide information security strategy
• Deliver and coordinate security awareness and training initiatives
• Promote a security-conscious culture across IT, Warehouse, and Business Teams
• Collaboration & Reporting
• Work cross-functionally with infrastructure, cloud, and application teams to embed security into operational workflows
• Prepare dashboards, reports, and metrics on security operations and tool performance
• Third-Party & Vendor Security
• Support vendor security assessments and Onboarding/Offboarding
• Ensure security requirements are understood and met in supplier engagements
• Monitor third-party compliance and risk mitigation activities
• Continuous Improvement
• Evaluate emerging security technologies and methodologies
• Recommend and deploy new tools to strengthen the overall cybersecurity program

What we need from you

• Bachelor’s degree in information security, Computer Science, Engineering, or related field (or equivalent practical experience)
• 5+ years of experience in cybersecurity operations, security engineering, or industrial network security
• Hands-on experience with SIEM (e.g., Rapid7, Microsoft Sentinel) and EDR (e.g., Sophos, Defender for Endpoint)
• Experience with vulnerability management tools (e.g., Rapid7)
• Working knowledge of firewalls (FortiGate, Palo Alto), IDS/IPS, and network segmentation
• Solid understanding of Windows, Linux, and industrial control system architectures
• Scripting/automation experience (PowerShell, Python, or Bash) preferred
• Familiarity with cloud platforms (Azure, AWS) and secure connectivity in hybrid environments
• Experience designing and implementing Zero Trust architecture
• Experience hardening servers and network devices
• Experience implementing cloud-native security controls (Security Groups, IAM policies, Azure AD Conditional Access)
• Required: CompTIA Security+, GICSP, or a GIAC certification (e.g., GCIA, GCIH)
• Preferred: CISSP or CISM
• Must be available to provide emergency support outside regular business hours when urgent security matters arise.
• Strong analytical and troubleshooting skills in complex, networked environments
• Excellent communication skills with both technical and non-technical stakeholders
• Ability to balance security priorities with operational continuity
• Collaborative, proactive problem-solving mindset
• Must be legally eligible to work for the Company at all times.
• Valid Passport ability to occasionally travel if required to other offices locations in CAD/USA/MEX.