Security Engineer – SIEM, EDR, IAM & Cloud Security

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Montreal; On-site; CAD 90,000 - 130,000; Full time

Job summary

Astra-North Infoteck Inc. in Montreal, QC, seeks a Security Engineer to design and maintain security controls across network, cloud, server, endpoint and application environments.

You will monitor security events with SIEM and EDR, perform vulnerability assessments, and support incident response activities to contain and eradicate threats. Collaborate with infrastructure, cloud, application, and DevOps teams to embed security best practices, assist in audits, and meet ISO 27001, NIST, SOC2,

Qualifications

• Design and maintain security controls across network, cloud, server, endpoint and application environments.
• Monitor security events and investigate incidents using SIEM/EDR tools.
• Conduct vulnerability assessments and risk analysis; track remediation.

Responsibilities

• Design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments.
• Monitor security events and investigate incidents using SIEM, EDR, and monitoring tools.
• Conduct vulnerability assessments, risk analysis, and remediation tracking.
• Assist in security audits, compliance assessments, and regulatory requirements (ISO 27001, NIST, SOC2, PCI-DSS).

Tools

SIEM

EDR

IAM

Cloud Security

Firewall

IDS/IPS

WAF

DLP

Endpoint Protection

Job description

Security Engineer – SIEM, EDR, IAM & Cloud Security

• Design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments.
• Monitor security events and investigate incidents using SIEM, EDR, and security monitoring tools.
• Perform vulnerability assessments, risk analysis, and remediation tracking.
• Support incident response activities, including threat detection, containment, eradication, and recovery.
• Configure and manage security technologies such as firewalls, IDS/IPS, WAF, DLP, IAM, and endpoint protection solutions.
• Conduct security assessments and recommend improvements to strengthen the organization's security posture.
• Collaborate with infrastructure, cloud, application, and DevOps teams to integrate security best practices.
• Assist in security audits, compliance assessments, and regulatory requirements (ISO 27001, NIST, SOC2, PCI-DSS, etc.).
• Develop and maintain security policies, procedures, and technical documentation.
• Stay current with emerging cyber threats, vulnerabilities, and industry security trends.