Description:

The Cloud Security Engineer is responsible for the day-to-day delivery of Security Operations for Firmex and the operational monitoring of technology and overall delivery of Security Operations.
The role involves collaborating within a team of security professionals and across the organization on security best practices, product research, and product support.
The engineer will support various IT, IT Security, and Business projects by providing input on security technologies and operational practices.
The position requires developing subject matter expertise on assigned security technologies to enable effective and efficient delivery of security services.
The engineer will collaborate with engineering, infrastructure services, and application development organizations to choose appropriate technology solutions and facilitate their integration into the company environments.
The role includes developing standards in partnership with Engineering, Infrastructure Services, and Application Development.
The engineer will contribute to the development of Standards, Technical Security Specifications, and Operating Procedures as required.
The position involves actively monitoring and researching cyber threats that may impact business operations or technology infrastructure.

Requirements:

A bachelor’s degree in Computer Science, Computer Engineering, or an equivalent field is required.
Experience with Incident Management and Incident Handling is necessary.
The candidate must have experience writing custom scripts in PowerShell/Bash.
Experience managing and configuring AWS services is required.
The candidate should have experience writing CloudFormation templates.
Experience with Vulnerability Management and Penetration Testing is highly desirable.
Certifications such as CISSP, OSCP, or CISA are considered an asset but are not mandatory.
Infrastructure experience with Windows and Linux is required.
Familiarity with industry compliance standards such as PCI, HIPAA, GDPR, and SOC (1 and 2) is necessary.
The candidate must have experience working with SaaS and PaaS environments and Cloud Native technologies.
Experience within a 24x7 production environment, preferably across multiple data centers, is required.
The candidate should have experience in information security or with systems and computer operations, including Identity & Access Management, IT operations, Certification & Key Management, Security Platform Administration, and Security Incident Response.

Firmex promotes an equitable, diverse, and inclusive environment where all employees and candidates can thrive.
The company encourages applications from BIPOC, LGBTQIA2S+, women, people with disabilities, internationally trained professionals, and historically disenfranchised groups.
Firmex is committed to providing accommodations or adjustments throughout the interview process and beyond for candidates who need them.