Security Engineer || Montreal, QC - Onsite || Fulltime FTE

Security Engineer

Location: Montreal, QC
Work Mode: Onsite
Employment Type: Full-Time Permanent (FTE)

Job Summary

We are seeking an experienced Security Engineer to design, implement, monitor, and maintain enterprise security solutions across network, cloud, server, endpoint, and application environments. The ideal candidate will have strong hands-on experience in security operations, vulnerability management, incident response, and security controls.

Key Responsibilities

• Design, implement, and maintain security controls across network, cloud, server, endpoint, and application environments .

• Monitor security events and investigate potential threats using SIEM, EDR, and security monitoring tools .

• Perform vulnerability assessments, risk analysis, remediation, and vulnerability tracking .

• Support incident response activities, including threat detection, containment, eradication, and recovery .

• Configure and manage security technologies including firewalls, IDS/IPS, WAF, DLP, IAM, and endpoint protection solutions .

• Conduct security assessments and recommend improvements to strengthen the organization's overall security posture.

• Collaborate with Infrastructure, Cloud, Application, and DevOps teams to implement security best practices.

• Support security audits, compliance assessments, and regulatory requirements.

• Assist with security frameworks and standards such as ISO 27001, NIST, SOC 2, and PCI-DSS .

• Develop and maintain security policies, procedures, standards, and technical documentation.

• Stay current with emerging cybersecurity threats, vulnerabilities, attack techniques, and industry trends .

Required Skills & Qualifications

• Strong experience in Cybersecurity / Security Engineering within an enterprise environment.

• Hands-on knowledge of SIEM, EDR, vulnerability management, firewalls, IDS/IPS, WAF, DLP, IAM, and endpoint security .

• Experience with security monitoring, threat detection, incident response, and security investigations .

• Knowledge of network, cloud, server, endpoint, and application security principles.

• Experience with security risk assessments and vulnerability remediation.

• Understanding of ISO 27001, NIST, SOC 2, PCI-DSS , and related security/compliance standards.

• Strong analytical, troubleshooting, communication, and documentation skills.

• Ability to work effectively with cross-functional infrastructure, cloud, application, and DevOps teams.