Let’s build something amazing together!
At CadMakers, our IT and Development teams work hand-in-hand to push the boundaries of what’s possible in construction technology, and keeping our platforms secure is at the heart of everything we do. We’re looking for a proactive, hands-on Cybersecurity Engineer who lives, eats, and breathes security. Reporting directly to the IT Engineer and collaborating closely with our software engineering teams, you’ll be someone ready to dive in, take ownership of our network and application security, and help safeguard our digital infrastructure as we scale.
This role is ideal for someone who is resourceful, enjoys solving complex security challenges, stays calm under pressure, adapts to new threats quickly, and thinks like attackers to better analyze and protect our systems. You’ll be hands-on in all aspects of our network security processes, take responsibility for the security of our network applications, develop essential security policies, and independently manage our infrastructure. As a valued member of the security team, you'll help protect and scale our environment as we grow. Knowledge of SOC 2 frameworks and RMM systems is essential.
Who Are We? Founded in 2014, CadMakers is an industry-leading digital construction and manufacturing technology company headquartered in Burnaby, British Columbia, Canada 🇨🇦. We are dedicated to delivering cutting-edge digital solutions to the global construction industry 🏗️ tackling the most complex yet common problems in the field, empowering our clients with transformative tools and expertise.
Our Product cmBuilder.io is our fast-growing flagship product 🚀, first released in 2020, and is rapidly becoming the new industry standard for 3D site logistics planning and 4D simulations. This high-performance, web-based tool is designed to be accessible, intuitive, and easy to use, enabling 100s of construction companies - primarily General Contractors - to win more projects and plan them effectively.
About the Role
Day to Day!
- 💬 IT & Sprint Integration: Participate in IT sprint planning to ensure security tasks, enhancements, and remediation efforts are continuously integrated into team workflows.
- 📋 Compliance & Frameworks: Maintain and align our posture with industry security standards and frameworks (SOC2, ISO 27001, NIST, CIS Controls).
- 👥 Cross-Team Collaboration: Work closely with software developers to provide clear, actionable solutions (with pros and cons) for identified security weaknesses.
- 🛠️ Infrastructure & Cloud Care: Manage and improve cloud hosting infrastructure in Azure as well as on-premises environments.
- 🔄 Multi-Hat Flexibility: Adapt and step into various IT and security responsibilities as needed to help protect and grow the organization.
Risk Assessment & Monitoring
- 🔍 Perform regular vulnerability assessments and deep dives across systems and applications.
- 🚨 Monitor, respond to, and triage security incidents in real time.
- 📊 Set up automated auditing, alerts, and notifications across our entire infrastructure using KQL or other log query languages.
Security Engineering & Automation
- 🔒 Develop and implement a modern Zero Trust security model across our networks.
- 🤖 Automate end-device deployments and security patch management using RMM software and custom scripts to stay ahead of new CVEs.
- 📈 Commit to ongoing learning to keep pace with evolving technological capabilities and emerging cybersecurity threat vectors.
What You Bring
Required:
- Minimum of 3 years of practical experience in network security, focusing on application security.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Security and Assurance, Network Engineering, Computer Engineering, or Software Engineering
- Proficiency in Microsoft Office 365 Admin Center and all Azure cloud services.
- In-depth knowledge and hands-on experience in Office 365, Azure infrastructure, Microsoft Intune, and Entra Domain Services (formerly AAD) (Entra ID)
- In-depth understanding and hands-on experience of on-premises and cloud security, including Microsoft tools and frameworks such as Sentinel and Microsoft Defender.
- Experience automating end device deployment and managing security patches.
- Knowledge of NIST, ISO 27001, CIS Controls, SOC2 and regulatory requirements.
- Experience with:
- Python, Bash and PowerShell scripting.
- C#, React and secure coding practices.
- Linux operating systems and security software.
- Kubernetes. - Proficiency in DevOps tools and practices, including CI/CD pipelines and containerization.
Key Skills
- 🧠 Strong Critical Thinker & Risk Assessor: Exceptional analytical and problem-solving abilities to evaluate risks, weigh trade-offs, and design practical mitigation strategies.
- 🗣️ Effective Communicator: Ability to translate complex security risks into clear, understandable language for non-technical teams and leadership.
- 🔧 Self-Motivated & Autonomous: Capable of prioritizing tasks independently, taking full ownership of projects, and driving security initiatives without micro-management.
- 🤝 Team Player & Collaborative: Works constructively across departments, bridging the gap between security needs and practical software development goals.
- 🚀 Adaptable & Fast-Learning: Eager to continuously master new tools, keep up with new threats, and thrive in a fast-paced environment.
Salary, Term & Working Location
- $75,000 - $100,000 CAD yearly (commensurate with experience)
- Workplace: In-office position in our Burnaby, BC office; with with Hybrid Flex Options (1 day WFH) available after 3 months
- Extended comprehensive health, dental, vision, travel and life insurance coverage for you and your family
- Three weeks paid vacation
Why Work with Us?
- Rewarding work: we provide simple solutions to the construction industry's most complex problems, and you will directly see your impact on our client's projects around the world!
- Career Growth: Your performance drives our success, opening doors for advancement, allowing you to progress in our fast-paced team.
- Innovative Culture: Share ideas, challenge norms, and optimize everything in our monthly Innovation Day events.
- Development Support: Access and funding for resources to grow and #getbettereveryday.
- Amazing Team: Enjoy events, contests, and a fun, collaborative culture.
Our values: We are Innovative, we are Hard-Working, we are Humble, we are Customer-Focused, we value Performance, and we are a TEAM.
- At CadMakers, we believe great teams are built by people, not algorithms.
We do NOT use AI for reviewing your application. Your entire application will be reviewed by real-life human beings at CadMakers (this includes your answers to the application questions that we pose). We invest the time because the human touch matters in this crucial step, especially when finding people who fit our company culture and will help shape it as they grow with us. If AI plays a role later in the recruitment process, we’ll always be transparent and you’ll know because we’ll tell you.
Please note: our hiring process includes in-person interviews at our Burnaby office. To move forward, candidates must be currently located in the Metro Vancouver area or have a confirmed relocation date that allows them to attend in-person interviews.
