Staff Security Engineer – Enterprise Security

This is a fully remote position, open to applicants in Canada.

📋 Description

• Design, implement, and manage security controls across on-premises, cloud, and isolated environments.

• Develop automation and infrastructure-as-code to enhance security operations, reporting, and remediation processes.

• Collaborate with infrastructure, application, and platform stakeholders to facilitate remediation efforts and monitor compliance with CIS and NIST standards.

• Provide support for security tools pertaining to identity management, vulnerability assessment, logging, and cloud security aligned with team priorities.

• Generate operational and executive-level reports on security status and effectiveness.

• Oversee and enhance the ServiceNow platform, including managing workflows, access, data integrity, ITSM modules, scripting, and ACLs.

• Assist with ServiceNow Security Operations applications such as Vulnerability Response, Configuration Compliance, and Security Incident Response.

⛳️ Requirements

• Must be a Canadian citizen or a permanent resident of Canada.

• Must reside in Canada and perform all work from within the country.

• Required to obtain and maintain Government of Canada Reliability Status.

• A minimum of five years of verifiable background history for screening purposes.

• Over 8 years of practical experience in security engineering or systems administration within large-scale enterprise settings.

• Proficient in Linux administration and troubleshooting, with a working knowledge of Windows and directory services (Active Directory, LDAP).

• Competent in Python, along with PowerShell or Bash, for creating production-grade automation and integrations.

• Familiarity with infrastructure-as-code and DevOps methodologies, including tools like Terraform, Ansible or Puppet, CI/CD pipelines, and Git-based workflows.

• Comprehensive understanding of network security principles, including firewalls, segmentation, proxies, and DNS.

• Experience in hardening systems in accordance with CIS, STIG, or NIST standards, and converting requirements into technical controls.

• Knowledge of Canada Protected B classification and data residency stipulations for Canadian governmental systems.

• Practical experience in at least two specialized areas.

• Experience as a ServiceNow Administrator, including CSA certification or equivalent experience, workflow configuration, user access, data integrity, ITSM modules, JavaScript, GlideScript, and ACLs.

• Awareness of ServiceNow Security Operations applications such as Vulnerability Response, Configuration Compliance, and Security Incident Response.

• Preferred certifications include CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.

• Experience working in highly regulated, isolated, or air-gapped government environments is advantageous.

• Familiarity with AI or LLM-based automation is preferred.

• A strong grasp of ITIL and ITSM processes is preferred.

🏝️ Benefits

• Flexible or remote working options available.

• Employer-sponsored screening for Government of Canada Reliability Status.

• Commitment to equal opportunity employment.

• Reasonable accommodations provided during the application process.