SecOps Engineer

Currently hiring for the position of SecOps Engineer in Canada. Please refer to the job description below. This is a full-time role with the option of remote work, but candidates must be within Canadian territory.

Job Type: Full Time (100% Remote)

Responsibilities:

• Monitor, evaluate, and maintain systems and procedures to safeguard infrastructure, databases, and Web-based security.
• Identify, integrate, monitor, and improve infosec controls by understanding business processes. Assist in defining security requirements and reviewing systems to determine if they have been designed to comply with established security standards. Help in developing new standards as necessary.
• Conduct vulnerability assessments and monitor systems for potential security concerns. Design and configure infrastructure systems to help mitigate findings and improve security posture.
• Assist with security architecture reviews and conduct threat modeling exercises as new products and features are rolled out
• Research security trends, new methods, and techniques used in unauthorized data access to preemptively eliminate the possibility of system breaches.
• Respond to alerts from information security tools and triage and analyze potential security issues
• Troubleshoot security system and related issues.
• Collaborate and maintain relationships with various engineering teams across the organization to communicate and remediate security issues on time
• Educate engineering teams on security best practices and promote security by design
• Ensure compliance with regulations and privacy laws.

Skills Required:

• Minimum 5 years of experience working in security or related industry
• Proficient in one or more programming languages such as React, Python, Ruby, etc.
• Minimum 2 years of experience in secure coding/development
• Effective communication skills and experience collaborating with engineering teams
• Have a deep understanding of common application security vulnerabilities
• Demonstrated expertise in the Infrastructure security domain
• Understanding of Infrastructure security in the context of SDLC and CI-CD
• Experience working in all parts of the Infrastructure lifecycle
• Effective in communicating security vulnerabilities to key stakeholders
• Cloud Security Certifications like AWS Certified Security Specialty is preferred.

Apply!