Essential Skills:

- More than 6 years of security engineering experience with 3+ years in cloud:
- Azure
- AWS
- OCI

Hands-on experience with:

- Microsoft Defender for Cloud
- Sentinel
- Defender for Endpoint
- Strong knowledge of cloud-native security services across at least two major cloud providers.

Experience with:

- SIEM platforms
- Threat detection
- Incident response

Understanding of network security:

- Firewalls
- WAF
- IDS/IPS
- Zero Trust principles

Familiarity with compliance frameworks:

- CIS
- NIST
- ISO 27001
- SOC 2

Certifications:

- Microsoft Certified: Security Operations Analyst (SC-200) preferred
- Azure Security Engineer (AZ-500) preferred
- AWS Security Specialty or OCI Security Skilled is a strong asset

Design and implement cloud security architecture across:

- Azure
- AWS
- OCI environments

Configure and manage:

- Microsoft Defender for Cloud

• Defender for Endpoint (Plan 2)

- Sentinel SIEM

Implement and tune:

- Azure Firewall
- WAF policies (OWASP rules)
- DDoS Protection





Manage AWS security services:

- GuardDuty
- Security Hub
- Inspector
- AWS Config
- Macie

Configure OCI security services:

- Cloud Guard
- Security Zones
- VSS (Vulnerability Scanning Service)

Enforce:

- Security baselines
- CIS Benchmarks
- Regulatory compliance controls
- Implement EDR solutions and manage endpoint security posture across hybrid environments.

Design and review network security:

- NSGs
- Security Groups
- Security Lists
- NVA traffic inspection
- Integrate SIEM/SASE solutions and support SOC operations with detection and response runbooks.

Conduct:

- Security risk assessments
- Threat modelling
- Architecture reviews

Prepare:

- Governance documentation
- Security artefacts
- Executive-level security reporting

Nice to Have:

- Experience with SASE vendors: Zscaler, Palo Alto Prisma, Netskope.

📌 Cloud Security Engineer – Azure, AWS, OCI & SIEM (Toronto)
🏢 Astra North Infoteck
📍 Toronto