Security Engineer – Cybersecurity / Montreal, QC (Onsite)

Job Title: Security Engineer – Cybersecurity

Location: Montreal, QC

Work Model: Onsite

Role Overview

We are seeking an experienced Security Engineer – Cybersecurity to design, implement, and maintain security solutions across enterprise IT environments. The ideal candidate will have strong hands-on experience in security monitoring, incident response, vulnerability management, security controls, and threat mitigation across network, cloud, server, endpoint, and application environments.

Key Responsibilities

• Design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments.
• Monitor and investigate security events using SIEM, EDR, and other security monitoring tools.
• Perform vulnerability assessments, risk analysis, threat detection, and remediation tracking.
• Support incident response activities, including threat identification, containment, eradication, and recovery.
• Configure and manage security technologies, including firewalls, IDS/IPS, Web Application Firewalls (WAF), Data Loss Prevention (DLP), Identity and Access Management (IAM), and endpoint protection solutions.
• Conduct security assessments, identify control gaps, and recommend improvements to strengthen the organization's security posture.
• Collaborate with infrastructure, cloud, application, and DevOps teams to implement security best practices and secure system configurations.
• Support security audits, compliance assessments, and regulatory requirements aligned with ISO 27001, NIST, SOC 2, PCI DSS, and other applicable frameworks.
• Develop and maintain security policies, procedures, technical documentation, and incident response guidelines.
• Stay up to date with emerging cyber threats, attack techniques, vulnerabilities, and industry security trends.

Required Skills and Qualifications

• Hands-on experience in cybersecurity engineering, security operations, or a related security role.
• Strong knowledge of SIEM, EDR, threat detection, security monitoring, and incident response.
• Experience with network security technologies, including firewalls, IDS/IPS, WAF, and endpoint protection.
• Knowledge of vulnerability management, risk assessment, remediation, and security hardening.
• Understanding of cloud, server, endpoint, and application security principles.
• Familiarity with IAM, DLP, access controls, and security policy implementation.
• Knowledge of security frameworks and compliance standards, including ISO 27001, NIST, SOC 2, and PCI DSS.
• Strong troubleshooting, analytical, documentation, and problem-solving skills.
• Ability to collaborate with cross-functional technical teams and support security initiatives in an enterprise environment.

Preferred Qualifications

• Relevant cybersecurity certifications such as CISSP, CEH, Security+, or vendor-specific security certifications.
• Experience with enterprise security platforms and security automation tools.
• Familiarity with cloud security controls, security configuration management, and DevSecOps practices.