Job Summary:Senior Information Security Cloud Specialist with 8–10+ years of experience, deep multi-cloud expertise (AWS + Azure), and the ability to drive technical strategy across an IT, Cybersecurity, and other business units. The Senior Specialist will act as DevSecOps lead on security-related projects and technologies and ensure the effective implementation and management of security tools as we continue to improve information security at Martinrea. The Security Specialist will be responsible for providing daily support, IR, and on-call rotation.Required Education and Experience:Bachelor's degree in Information Security, Cyber Security, Computer Science, or equivalent10+ years of working experience in support of a large-scale, mission-critical enterprise security infrastructure5+ years of previous experience in SecOps, DevSecOps, Cloud Security, Threat Detection & Response, or software development with a robust focus on security tool onboarding and optimization5+ years of working experience with security tools and technology (Defender, Intune, IAM, Vulnerability Management, DLP, and others)Deep subject matter expertise with security engineering best practices for subjects such as CVSS, EPSS.Design, implement, and maintain security measures for our cloud infrastructure, including VPCs, security groups, IAM roles, and access controlsExpertise across AWS and Azure securityExperience with CSPM/CNAPP platforms (Wiz, CrowdStrike, Defender, etc.)Experience with AI/ML platforms and cloud-based AI servicesExpert in cloud-native security controls (IAM, KMS, VPC security, encryption, logging,



and monitoring).5+ years of experience with MS O365, Azure security, MFA, and MDM are a mustDeep knowledge and experience with Email SecurityStay current with cloud security trends, emerging threats, and best practices, ensuring configuration guidance remains accurate and relevantKnowledge of security industry standards and certification frameworks such as ISO 27001, SOC2, CSA CCM, NIST, PCI DSS, etc.Preferred to have: CCSP, Azure Security Engineer, AWS Security Specialty, and CISSPResponsible For the Following Essential Functions:Lead CNAPP architecture & rollout across multi-cloud and Hybrid solutions, including integration patterns and operationalization design.Perform security assessments and audits of our infrastructure, identifying and mitigating security gaps and weaknessesImplement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security, EC2 hardening, and cloud-native protectionInvestigate potential security incidents and serve as the initial incident responderHarden our cloud-native environments (AWS, Azure) by introducing secure‐by‐default designs and features into network, tooling, and processesDrive the design and implementation of Zero Trust architectures, including identity‐based perimeters, mTLS, network segmentation,



and least‐privilege access controlsMonitor and analyze logs, events, and metrics to identify security incidents, potential breaches, and emerging threatsRepresent DevSecOps to leadership, audit (internal and external), and regulators on technical questionsDefine and publish Security Reference Architectures and reusable patterns (secure‐by‐design) for engineering adoption across platforms and products. Partner with platform engineering / DevSecOps teams to integrate scanning and controls into CI/CD (e.G., Terraform Cloud, GitHub Actions, Azure DevOps), including risk decisions and exceptionsEmbed security into the full software development lifecycle through scalable guardrails, automated testing frameworks, and developer‐facing documentation.Develop required documentation to help operationalize and automate technologies in close coordination with security operations to ensure compliance requirements are metContinuously identify areas needing improvement, create action plans, and execute to implement changes on timeHybrid (3 days in Office)Physical Demands:Constant communication with employees, peers, and leadershipOvertime as requiredOther Duties:This job description is not designed to contain a comprehensive list of duties and responsibilities required for this job. Duties and responsibilities may change at any time with or without noticeDisclaimer:This job description does not constitute a contract of employment. The Company may exercise its employment at will right at any time. #J-18808-Ljbffr

📌 Senior Information Security Specialist (Cloud Security) (Vaughan)
🏢 Martinrea International
📍 Vaughan