Why this Cyber Security Engineer role is like needlecraft.
- Cambridge, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
The Apollo Guidance software was stored in 'core rope memory' which was literally woven by hand, threading wires through or around tiny magnetic cores. This is a chance to build our security function from ground control up, shooting for the stars as we scale.
There are 2 versions of this ad. Below is the anodyne version. Bonus points if you can find the more analeptic version. And provide proof of your quest. Good luck!
- The Cyber Security Engineer will work in a fast-paced, mission-critical, cloud-native, AI-first business.
- The Cyber Security Engineer will enjoy an excellent salary + benefits.
- The Cyber Security Engineer will enjoy hybrid working.
- The Cyber Security Engineer will work with AI-powered tools within a sophisticated MS365/AWS security function.
- The Cyber Security Engineer will travel to international offices from time to time.
- The Cyber Security Engineer will build, rather than administer, our SIEM platform.
- The Cyber Security Engineer will be involved with deployment, configuration and detection engineering.
- The Cyber Security Engineer will ensure our SOC is more lockstitch than chain stitch.
- The Cyber Security Engineer will have a solid understanding of incident response principles.
- The Cyber Security Engineer will author and fine-tune complex detection rules.
- The Cyber Security Engineer will make mission-critical decisions about alert quality, noise reduction and cost factors.
- The Cyber Security Engineer will evaluate findings from pen tests and security tool diagnostics.
- The Cyber Security Engineer will escalate critical issues to the appropriate teams and track progress to resolution.
- The Cyber Security Engineer will build our alert management function and define appropriate escalation paths.
- The Cyber Security Engineer will Implement out-of-hours response procedures and own the on-call model.
- The Cyber Security Engineer will enjoy a huge amount of autonomy and ownership.
- The Cyber Security Engineer will act as the central security resource across our entire estate.
- The Cyber Security Engineer will report into the CISO and work closely with DevOps, Product, Engineering and R&D.
- The Cyber Security Engineer will explain complex technical subjects to executives clearly and succinctly.
- The Cyber Security Engineer will understand cloud infrastructure, identity management and application security.
- The Cyber Security Engineer will need first-class knowledge of the AWS security ecosystem.
- The Cyber Security Engineer will have proven experience securing low-latency, high-performance environments.
- The Cyber Security Engineer will be familiar with CloudTrail, CloudWatch, IAM, GuardDuty, Inspector and Detective.
- The Cyber Security Engineer will need first-class knowledge of the Microsoft security ecosystem.
- The Cyber Security Engineer will be familiar with Microsoft 365, Entra ID, PIM, Conditional Access and Defender.
- The Cyber Security Engineer might well have some formal AWS or Microsoft certifications.
Interested? please share a resume and short covering letter - that’s right you don’t go fishing without a hook or knitting without a needle - convincing us that you actually enjoyed reading the above.
More about this job
Responsibilities
Build and develop the organization’s SIEM and security operations capabilities, including deployment, detection engineering, alert management, escalation paths, and on-call procedures. Evaluate security findings, improve alert quality and reduce noise, coordinate remediation, and advise executives while working with DevOps, Product, Engineering, and R&D.
Requirements
Candidates should have strong knowledge of AWS and Microsoft security ecosystems, including relevant cloud, identity, and security tools, and experience securing low-latency, high-performance environments. They should understand incident response and be able to author complex detection rules, assess security findings, and communicate technical issues clearly; formal AWS or Microsoft certifications may be beneficial.
Skills
- Security Information and Event Management (SIEM)
- Detection Engineering
- Incident Response
- Alert Management
- AWS Security
- Microsoft Security
- Cloud Infrastructure
- Identity Management
- Application Security
- Security Operations
- Security Monitoring
- Penetration Testing
- Escalation Management
- CloudTrail
- GuardDuty
- Microsoft Defender
Benefits
- Hybrid Working
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Management & Leadership
Keywords
- Cybersecurity
- Security Information and Event Management (SIEM)
- Security Operations Center (SOC)
- Detection Engineering
- Incident Response
- Alert Management
- Escalation Paths
- On-Call Model
- AWS
- Microsoft 365
- Entra ID
- Privileged Identity Management (PIM)
- Conditional Access
- Microsoft Defender
- CloudTrail
- CloudWatch
- Identity and Access Management (IAM)
- GuardDuty
- Inspector
- Detective
- Cloud Infrastructure
- Identity Management
- Application Security
- Penetration Testing
- DevOps
- Low-Latency Environments
- High-Performance Environments
- Detection Rules
- Security Diagnostics
- AWS Certifications