Information Security Engineer (Cybersecurity)

Location: Ottawa, Canada — hybrid; other Canadian locations — remote.

Company

hirify.global develops an AI-infused SaaS platform for modern supply chain orchestration, serving global enterprise customers.

What you will do

• Design, implement, and operate security controls across Corporate IT environments and the hirify.global Maestro SaaS platform.
• Translate security requirements into scalable controls across identity, endpoint, network, workload, application, and data layers.
• Lead security engineering for cloud migrations, SaaS integrations, container and Kubernetes adoption, and platform modernization.
• Embed security controls into CI/CD pipelines and infrastructure-as-code workflows, and operationalize approved security patterns and guardrails.
• Identify, prioritize, remediate, and validate vulnerabilities and misconfigurations using a risk-based approach.
• Strengthen detection and monitoring capabilities and provide technical escalation support for investigation, containment, remediation, and post-incident corrective actions.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or equivalent experience.
• 6–8 years of experience in security engineering, cloud security, or enterprise security roles.
• Hands-on experience implementing and operating security controls across multiple domains and protecting enterprise and SaaS environments.
• Experience securing GCP and/or Azure environments, including hybrid or multi-account deployments.
• Strong understanding of modern authentication, identity federation, access control models, encryption, and authentication mechanisms.
• Experience identifying, validating, prioritizing, and remediating vulnerabilities and misconfigurations across cloud, SaaS, and enterprise systems, including hands-on implementation when required.
• Experience embedding security controls into platform designs, CI/CD pipelines, and infrastructure-as-code workflows.
• Hands-on experience with SIEM and XDR platforms such as Microsoft Sentinel and Defender for Endpoint, or similar.
• Experience implementing and managing firewalls, IDS/IPS, network segmentation, private connectivity, secure ingress/egress, CNAPP, and IAM controls.
• Strong understanding of ISO 27001/27002, NIST CSF, and SOC 2 frameworks.
• Ability to influence architecture, risk decisions, and roadmap priorities without formal authority; adaptability in high-urgency operational contexts; and demonstrated ability to coach or mentor junior team members.

Nice to have

• CISSP, CCSP, or Certified Security — GCP or Azure Security Engineer certification.
• GIAC Cloud Security, OSCP, HashiCorp Terraform Associate, or policy-as-code certifications.

Culture & Benefits

• Flexible work options, including remote work for other Canadian locations and hybrid work in Ottawa.
• Flexible vacation and company-wide hirify.global Days.
• Physical and mental well-being programs, including virtual fitness classes.
• Mentorship, training, career development, recognition programs, referral rewards, and hackathons.
• Inclusive hiring practices, accessibility accommodations, and diversity, equity, and inclusion initiatives.
• Work supporting supply chain technology used by enterprise customers worldwide.