Security Engineer - End Point and Cloud Security
Location: 3 days/week hybrid – Atleast 1day/week in Mississauga office and rest 2day/week can be from Mississauga or Toronto Downtown office
Contract duration : Around 1 year
- 9+ yrs of Cyber security experience
- 5+ years of experience in endpoint security, incident response, or a similar role.
- Design and implement Industry known Endpoint security solution (SentinelOne) to protect our organization's endpoints.
- Configure and manage SentinelOne policies, rules, and alerts to detect and respond to security threats.
- Monitor and analyze endpoint security events, identify potential security incidents, and provide timely response and remediation.
- Collaborate with cross-functional teams to ensure effective integration of SentinelOne with other security tools and platforms.
- Conduct vulnerability assessments and endpoint security audits to identify and address security weaknesses.
- Experience with Azure Cloud security
- Manage/Enhance DLP policies both in Azure and O365.
- Manage/Enhance Phishing and Spam policies
- Develop and maintain documentation, standard operating procedures, and security playbooks related to SentinelOne.
- Provide technical guidance and support to junior engineers in managing and troubleshooting SentinelOne and other Security Operation tools.
- Proficiency with security event monitoring, detection, and incident response methodologies.
- Stay updated with the latest endpoint security threats, vulnerabilities, and industry best practices.
- An ability to reason about security decisions and communicate ideas clearly and effectively to all stakeholders.
- Manage and enhance the security processes and technologies to identify, deter, investigate, and remediate security events.
- Relevant certifications such as SentinelOne Certified Engineer or equivalent are preferred.
- Certifications:
- CISSP (Preferred)
- CCSP (Preferred)
- CISM (preferred)
- CISA (preferred)
- PMP (preferred)
- Ability to work with little or no direct supervision
- Experience with Azure Advisor, Mx Tool, Tenable, Zero Fox and Splunk highly desirable
- Cyber incident response experience is desirable
- Azure data-lakes, Windows SQL and/or PostgreSQL experience is good to have
- Prior experience as an Information security architect is a huge asset
- Required to be on-call rotation, 24/7, one week/month
Regards
Dev
dev.s@pforceinc.com