Information Systems Security Engineer (ISSE)

SAP SE; Toronto; On-site; CAD 125,000 - 215,000; Full time

Job summary

A global technology company is seeking an Information Systems Security Engineer in Toronto, Ontario. This hands-on role requires at least 3 years of experience in security engineering, focusing on maintaining systems security posture and mitigating vulnerabilities in cloud environments. Candidates should possess a Bachelor's degree in Cyber Security or related fields and have expertise in various security frameworks. A competitive compensation package is offered ranging from CAD 125,900 to CAD 214,300.

Benefits

Flexible working models

Health and well-being focus

Equal opportunity workplace

Qualifications

• Minimum 3 years of practical experience in a Security Engineer role.
• Expertise in security frameworks such as NIST and ISO 27001.
• Strong analytical and problem-solving skills.

Responsibilities

• Configure and maintain cyber security technologies.
• Develop controls to identify compliance gaps.
• Collaborate with teams to ensure security compliance.

Skills

Cloud security

Problem-solving

Communication skills

Cyber Security frameworks

Analytical reasoning

Education

Bachelor's degree in Cyber Security or related field

Tools

AWS

Azure

GCP

IBM Cloud

Job description

Information Systems Security Engineer (ISSE)

SAP Sovereign Cloud Services Canada is a cloud offering designed to deliver SAP Intelligent Enterprise cloud solutions within the sovereign boundary of the Canada. It aligns to the Canadian Public Sector and Critical Infrastructure requirements and offers SAP cloud solutions to organisations and entities with specific data sovereignty requirements.

We are looking for an Information Systems Security Engineer (ISSE) who will help maintain our systems security posture and protect our cloud landscapes. This is a hands-on role to assist in the protection of our systems, identification of threats/vulnerabilities, and the mitigation and remediation of said vulnerabilities to ensure security compliance.

What you will do

• Configure, maintain, administer and deploy a wide range of cyber security technologies such as IDS/IPS, EDR/XDR, SIEM, SOAR, Cloud vulnerability assessment, cloud-native security technologies (CSPM, CNAPP, CASB, CIEM, etc…)
• Provide technical leadership in the architecture, design, deployment, management, configuration and use of Cyber Security technologies
• Develop configuration controls and automations to identify compliance gaps
• Identify gaps in our current processes, workflows, designs, and controls
• Solve complex problems using data driven recommendations for changes and improvements while considering people, processes, and technology
• Provide mentoring and contribute to the overall growth and development of the team
• Collaborate with team members to ensure compliance with system security controls, aligning with government security policies and standards.

What you will bring

• Bachelor's degree, ideally in Cyber Security, Information Security, Computer Science, Engineering, or Information Technology
• Minimum 3 years of practical experience in a Security Engineer role working with cloud technologies
• Expertise in implementing and adhering to security frameworks such as NIST, ITSG-33, and ISO 27001
• Knowledge of cloud security, vulnerability management, major security compliance and development frameworks and principles
• Mastery in at least one of the SecDevOps practices, such as Security as Code, CI/CD, Infrastructure as Code, Secure Coding Practices, Cloud Governance and Compliance
• Experience working with cloud native security platforms a plus - CNAPP, CWPP, CSPM, CIEM, etc
• In-depth technical knowledge of cloud platforms - AWS, Azure, GCP, IBM Cloud
• Previous work experience with the various phases of security incident response
• Experience working in a dynamic environment requiring collaboration across multiple organizations
• Strong analytical and reasoning, problem-solving, and decision-making skills
• Willingness to expand and grow
• Excellent written, oral communication, and documentation skills
• A keen curiosity about all aspects of cyber security (especially in the Cloud)
• Use industry sources to stay current with known Cloud security issues
• Personable, reliable team player, who’s also capable of working independently

Inclusion and equal opportunity

We win with inclusion. SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. SAP is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities. If you need accommodation or special assistance to navigate our website or complete your application, please email Recruiting Operations Team: [e-mail]. For SAP employees, only permanent roles are eligible for the SAP Employee Referral Program. Specific conditions may apply for roles in Vocational Training.

EOE AA M/F/Vet/Disability: Qualified applicants will receive consideration for employment without regard to age, race, religion, national origin, ethnicity, gender, sexual orientation, gender identity or expression, protected veteran status, or disability.

Pay transparency and compensation SAP believes in pay transparency. The compensation range for this position is CAD 125,900 – CAD 214,300. The actual offer will depend on education, skills, experience, and other factors. A summary of benefits is available at www.SAPNorthAmericaBenefits.com.

Note: Due to the nature of the role, which involves global interactions with SAP entities and with employees in Canada, English proficiency is required for positions based in Quebec.