Senior Information Security Specialist (Cloud Security)

Martinrea International; Vaughan; Hybrid; CAD 140,000 - 180,000; Full time

Job summary

Martinrea International is seeking a Senior Information Security Cloud Specialist with 8–10+ years of cloud security expertise to drive technical strategy across IT, Cybersecurity, and business units. The role acts as DevSecOps lead on security projects, implementing and managing security tools while supporting daily IR and on-call duties.

You will design and secure AWS and Azure environments, integrate cloud-native controls, and advance trust architectures.

Qualifications

• Bachelor's degree or equivalent in information security, computer science, or related field.

Responsibilities

• Lead CNAPP architecture and rollout across multi-cloud and hybrid solutions.
• Perform security assessments and audits of infrastructure, identifying gaps and mitigations.
• Implement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security and cloud-native protection.
• Investigate potential security incidents and serve as initial incident responder.
• Harden cloud-native environments with secure-by-default designs and features for network, tooling, and processes.
• Drive the design and implementation of Zero Trust architectures, including identity-based perimeters, mTLS, and least-privilege access.
• Monitor logs, events, and metrics to identify incidents, breaches, and threats.
• Represent DevSecOps to leadership, audits, and regulators on technical questions.
• Define and publish Security Reference Architectures and reusable patterns for engineering adoption across platforms.
• Embed security into the SDLC with scalable guardrails, automated testing, and developer-facing documentation.
• Develop documentation to operationalize and automate technologies with security operations for compliance.
• Continuously identify areas for improvement and implement changes on time.
• Hybrid (3 days in Office)

Skills

CNAPP architecture

DevSecOps

Cloud security

Threat detection

Zero Trust

IAM roles

Kubernetes security

Security assessments

Education

Bachelor’s degree in Information Security

Tools

Defender

Intune

IAM

Vulnerability Management

DLP

Job description

Job Summary:

Senior Information Security Cloud Specialist with 8–10+ years of experience, deep multi-cloud expertise (AWS + Azure), and the ability to drive technical strategy across an IT, Cybersecurity, and other business units. The Senior Specialist will act as DevSecOps lead on security-related projects and technologies and ensure the effective implementation and management of security tools as we continue to improve information security at Martinrea. The Security Specialist will be responsible for providing daily support, IR, and on-call rotation.

Required Education and Experience:

• Bachelor’s degree in Information Security, Cyber Security, Computer Science, or equivalent
• 10+ years of working experience in support of a large-scale, mission-critical enterprise security infrastructure
• 5+ years of previous experience in SecOps, DevSecOps, Cloud Security, Threat Detection & Response, or software development with a strong focus on security tool onboarding and optimization
• 5+ years of working experience with security tools and technology (Defender, Intune, IAM, Vulnerability Management, DLP, and others)
• Deep subject matter expertise with security engineering best practices for subjects such as CVSS, EPSS.
• Design, implement, and maintain security measures for our cloud infrastructure, including VPCs, security groups, IAM roles, and access controls
• Expertise across AWS and Azure security
• Experience with CSPM/CNAPP platforms (Wiz, CrowdStrike, Defender, etc.)
• Experience with AI/ML platforms and cloud-based AI services
• Expert in cloud-native security controls (IAM, KMS, VPC security, encryption, logging, and monitoring).
• 5+ years of experience with MS O365, Azure security, MFA, and MDM are a must
• Deep knowledge and experience with Email Security
• Stay current with cloud security trends, emerging threats, and best practices, ensuring configuration guidance remains accurate and relevant
• Knowledge of security industry standards and certification frameworks such as ISO 27001, SOC2, CSA CCM, NIST, PCI DSS, etc.
• Preferred to have: CCSP, Azure Security Engineer, AWS Security Specialty, and CISSP

Responsible For the Following Essential Functions:

• Lead CNAPP architecture & rollout across multi-cloud and Hybrid solutions, including integration patterns and operationalization design.
• Perform security assessments and audits of our infrastructure, identifying and mitigating security gaps and weaknesses
• Implement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security, EC2 hardening, and cloud-native protection
• Investigate potential security incidents and serve as the initial incident responder
• Harden our cloud-native environments (AWS, Azure) by introducing secure‑by‑default designs and features into network, tooling, and processes
• Drive the design and implementation of Zero Trust architectures, including identity‑based perimeters, mTLS, network segmentation, and least‑privilege access controls
• Monitor and analyze logs, events, and metrics to identify security incidents, potential breaches, and emerging threats
• Represent DevSecOps to leadership, audit (internal and external), and regulators on technical questions
• Define and publish Security Reference Architectures and reusable patterns (secure‑by‑design) for engineering adoption across platforms and products. Partner with platform engineering / DevSecOps teams to integrate scanning and controls into CI/CD (e.g., Terraform Cloud, GitHub Actions, Azure DevOps), including risk decisions and exceptions
• Embed security into the full software development lifecycle through scalable guardrails, automated testing frameworks, and developer‑facing documentation.
• Develop required documentation to help operationalize and automate technologies in close coordination with security operations to ensure compliance requirements are met
• Continuously identify areas needing improvement, create action plans, and execute to implement changes on time
• Hybrid (3 days in Office)

Physical Demands:

• Constant communication with employees, peers, and leadership
• Overtime as required

Other Duties:

• This job description is not designed to contain a comprehensive list of duties and responsibilities required for this job. Duties and responsibilities may change at any time with or without notice

Disclaimer:

This job description does not constitute a contract of employment. The Company may exercise its employment at will right at any time.