Position: Cloud Security Engineer

Location: Toronto, ON (Onsite)

Employment Type: Full-Time

Job Summary:

We are seeking a Cloud Security Engineer to secure Azure, AWS, and OCI environments. The role focuses on cloud security architecture, Microsoft Defender, Sentinel SIEM, network security, threat detection, incident response, and compliance . Strong multi-cloud security experience and knowledge of CIS, NIST, and ISO 27001 are preferred.

Key Responsibilities:

- Design and implement cloud security architecture across Azure, AWS, and OCI environments.
- Configure and manage Microsoft Defender for Cloud, Defender for Endpoint (Plan 2), and Sentinel SIEM.
- Implement and tune Azure Firewall, WAF policies (OWASP rules), and DDoS Protection.
- Manage AWS security services: Guard Duty, Security Hub, Inspector, AWS Config, and Macie.
- Configure OCI Cloud Guard, Security Zones, and VSS (Vulnerability Scanning Service).
- Enforce security baselines, CIS Benchmarks, and regulatory compliance controls (e.g., Ontario public sector).
- Implement EDR solutions and manage endpoint security posture across hybrid environments.
- Design and review network security: NSGs, Security Groups, Security Lists, NVA traffic inspection.




- Integrate SIEM/SASE solutions and support SOC operations with detection and response runbooks.
- Conduct security risk assessments, threat modelling, and architecture reviews.
- Prepare governance documentation, security artefacts, and executive-level security reporting.

Required Skills:

- 6+ years of security engineering experience with 3+ years in cloud (Azure, AWS, or OCI).
- Hands-on experience with Microsoft Defender for Cloud, Sentinel, and Defender for Endpoint.
- Robust knowledge of cloud-native security services across at least two major cloud providers.
- Experience with SIEM platforms, threat detection, and incident response.
- Understanding of network security: firewalls, WAF, IDS/IPS, and zero trust principles.
- Familiarity with compliance frameworks: CIS, NIST, ISO 27001, SOC 2.
- Microsoft Certified: Security Operations Analyst (SC-200) or Azure Security Engineer (AZ-500) preferred.
- AWS Security Specialty or OCI Security Professional a strong asset.

Nice to Have: Experience with SASE vendors (Zscaler, Palo Alto Prisma, Netskope).

📌 Cloud Security Engineer (Toronto)
🏢 Ku0026K Global Talent Solutions
📍 Toronto