Security Engineering Team Lead

1 month, 3 weeks ago
Full-time
Lead
DevOps and Infrastructure
ESO

ESO

ESO provides emergency management software designed to enhance the efficiency and effectiveness of emergency medical services and disaster preparedness teams through reliable data management and real-time information sharing.

Family Services
251-1K
Founded 2004

Description

  • Lead Security Engineers by supporting decisions, analyzing solutions, and enabling security consulting across the business.
  • Provide escalated security guidance to Product and Technology teams on platform design, application behavior, and Internet connectivity.
  • Contribute to application architecture and steer secure system implementation across a multi-cloud environment.
  • Apply defence-in-depth, threat modeling, zero-trust, security-by-design principles, and security standards across ESO’s product portfolio.
  • Use STRIDE threat modeling to evaluate new designs and ensure appropriate controls are implemented.
  • Mitigate vulnerabilities, support developers in producing secure code, and evaluate emerging security technologies.
  • Respond to security and compliance issues identified through analysis and automated tools.
  • Collaborate across teams and provide hands-on expertise to technology teams.
  • Help secure systems and applications used by thousands of emergency responders and hospitals worldwide.

Requirements

  • At least 5 years of experience securing software or infrastructure in cloud platforms such as Microsoft Azure, AWS, or GCP.
  • Experience securing systems according to Well-Architected Frameworks, such as the Azure Well-Architected Framework.
  • Strong networking knowledge, including experience designing, building, managing, or troubleshooting networks.
  • Experience applying security to networks, hosts, web applications, and cloud-native deployments.
  • Experience with security toolsets such as vulnerability management, firewalls, SIEM, PAM, IDS/IPS, EDR/XDR, DLP, SWG, WAF, CSPM, or CNAPP.
  • Understanding or experience with SAST, DAST, IAST, or RASP technologies.
  • Knowledge of CI/CD security practices and securing deployment pipelines.
  • Understanding of current attack tactics, techniques, and procedures, including the MITRE ATT&CK framework.
  • Must be based in Canada and fully authorized to work in Canada; visa sponsorship is not provided.
  • Preferred: experience with Infrastructure as Code, Azure-native technologies, threat modeling, NIST, CIS, OWASP Top 10, or SANS/CWE Top 25.

Benefits

  • Competitive medical, dental, and vision insurance.
  • RRSP with company match.
  • ESO-provided telemedicine service.
  • Front-loaded vacation and sick time.
  • Employee Assistance Program.
  • Life insurance and disability insurance.
  • Remote work arrangement for candidates based in Canada.
  • Training opportunities and mentoring.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cybersecurity Engineer

Nooks 1-10 Professional Services

Nooks is seeking a hands-on Cybersecurity Engineer to own and strengthen the company’s unclassified environment, maintaining NIST SP 800-171 and CMMC Level 2 compliance and audit readiness across its facilities.

Cybersecurity
1 day, 2 hours ago

Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

Dijital Team 11-50 Internet Software & Services

A Senior Microsoft Engineer (Level 3) will serve as a technical authority for a managed IT services provider, resolving complex issues and improving the security, reliability, and efficiency of multi-tenant Microsoft cloud environments for commercial customers.

Azure Cybersecurity PowerShell
1 day, 3 hours ago

HQ - Lead Information Security Engineer

Jobandtalent 1K-5K Professional Services

Job&Talent is seeking a Lead Information Security Engineer to lead a team of four and strengthen incident response, threat detection, cloud security, and security operations for its global AI-powered workforce platform.

AWS Azure CI/CD SIEM
1 day, 3 hours ago

Platform Security Engineer

ITHAKA 251-1K Diversified Consumer Services

ITHAKA is seeking a Platform Security Engineer to mature its DevOps practices into DevSecOps by integrating security automation, tooling, and secure-by-default workflows across software delivery and infrastructure.

AWS CI/CD DevSecOps
2 days, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers