Avint is hiring a Senior ISSO (Cybersecurity Compliance Lead / RMF SME) to support and protect critical federal systems within the HACS program at FRTIB HQ. In this role, you’ll be part of a high-performing team leading Risk Management Framework (RMF) and Authority to Operate (ATO) efforts across mission-critical systems. You’ll work at the intersection of cybersecurity, compliance, and mission operations, ensuring systems are secure, authorized, and aligned with federal requirements

• Lead the design and implementation of secure infrastructure application architecture and standards. • Embed security into the development lifecycle by building tooling and CI/CD guardrails. • Conduct deep-dive threat modeling sessions for new products and identify issues. • Serve as an Incident Commander during high-severity security events. • Oversee the lifecycle of cryptographic material and key management services. • Mentor Senior and Mid-level security engineers and champion a "security-first" culture.

Role Description The Security Specialist will drive enhancements in threat detection, incident response, vulnerability management, and cloud security. This role requires strong expertise in Microsoft Azure security technologies, SIEM operations, threat intelligence, and security automation, ensuring Beem’s defenses are proactive, scalable, and resilient against modern cyber threats. As a key member of the security team, you will work hands-on with Microsoft Sentinel, Sentinel Data Lake, Defender XDR, KQL-based threat hunting, SOAR automation, and UEBA to optimize Beem’s Security Operations Center (SOC) capabilities. You will also play a pivotal role in improving cloud security posture management (CSPM), identity security, and endpoint protection. The Security Specialist will be responsible for strengthening and maturing Beem’s Security Operations capabilities while overseeing the operational governance of a Managed Security Services Provider (MSSP) delivering SOC services. This role is open to remote or hybrid working arrangements within British Columbia. What you’ll do: - Security Operations & Incident Response - Lead threat detection engineering by writing advanced KQL-based detection rules in Microsoft Sentinel. - Manage and fine-tune SIEM correlation rules, threat intelligence integrations, and alerting mechanisms. - Deploy and optimize Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Identity. - Lead the deployment, configuration, and continuous optimization of Wiz (Cloud Security platform). - Develop custom detection logic for MITRE ATT&CK TTPs. - Integrate external threat intelligence feeds into Sentinel. - Conduct periodic validation of log coverage. - Own the development, standardization, and maintenance of comprehensive documentation across the enterprise security toolset. - Develop and maintain Standard Operating Procedures (SOPs) for various workflows. - Own and operationalize enterprise Privileged Access Management and Identity & Access Management controls. - Incident Response & Security Automation - Serve as an escalation point for security incidents, performing forensic analysis. - Develop and execute incident response runbooks for various threats. - Automate security response workflows using SOAR capabilities. - Conduct log analysis and correlation from diverse data sources. - Perform digital forensics and malware analysis. - Lead threat hunting exercises. - Vulnerability Management & Cloud Security - Enhance vulnerability scanning and remediation workflows. - Design and implement custom security baselines for various systems. - Harden Azure environments by applying CIS Benchmarking and Microsoft Secure Score improvements. - Secure Kubernetes Services and containerized workloads. - Work with IAM teams to optimize Conditional Access Policies. - Security Metrics & Threat Intelligence - Develop and track KPIs and KRIs to measure security posture. - Design, implement, and operationalize comprehensive health monitoring across the enterprise security toolset. - Implement threat intelligence initiatives. - Continuously assess and enhance security processes. - Compliance & Governance - Assist in responding to internal and external audits. - Maintain a deep understanding of security frameworks and standards. - Provide security advisory and governance support for IT and engineering teams. Qualifications - Bachelor’s degree in Computer Science, Information Security, or a related field. - 6-8 years of hands-on experience in security operations. - Extensive experience with Microsoft security technologies. - Proficiency in KQL scripting for threat hunting and security analytics. - Strong understanding of cloud security principles. - Industry certifications preferred: CISSP, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert. - Experience leading security operations projects. - Strong problem-solving skills in high-pressure incident response scenarios. - Ability to collaborate cross-functionally and communicate effectively. - Agile mindset with a continuous improvement approach. Benefits - Annual salary range: $95,500 - 119,400. - Performance bonuses tied to shared goals. - Extended health coverage, including mental health support. - Dental care. - Disability coverage. - Vacation and personal days. - Generous RRSP contributions. - In-house financial advice. - Free banking accounts and special mortgage rates.

Role Description Cleo is seeking a Lead Cloud Security Engineer to design, implement, and continuously improve security controls across our cloud infrastructure and SaaS environments. This role is responsible for strengthening Cleo’s AWS security posture, embedding secure-by-default cloud guardrails, and partnering closely with Platform and Engineering teams to reduce infrastructure risk without slowing innovation. The ideal candidate is hands-on, technically deep in AWS, and experienced in building scalable cloud security capabilities in a high-growth SaaS environment. What You Will Be Doing - Cloud Security Architecture - Design and implement secure cloud architecture patterns - Establish guardrails for AWS accounts and services - Strengthen multi-account strategy and segmentation - Improve IAM design, permission boundaries, and least-privilege models - Review major infrastructure changes for security impact - Cloud Detection and Visibility - Implement and tune cloud-native detection capabilities - Integrate AWS security services into centralized monitoring - Identify misconfigurations and excessive permissions - Improve signal-to-noise ratio in cloud alerts - Infrastructure as Code Security - Embed security controls into Terraform or other IaC workflows - Enforce policy-as-code guardrails - Ensure IaC scanning is integrated into CI/CD pipelines - Reduce configuration drift across environments - Vulnerability and Configuration Management - Oversee cloud misconfiguration detection and remediation - Track infrastructure vulnerability exposure - Reduce critical vulnerability exposure window - Partner with Platform teams to automate remediation - Data Protection and Encryption - Ensure proper encryption standards across storage and databases - Manage KMS usage and key lifecycle best practices - Strengthen logging and monitoring coverage - Incident Response Support - Lead cloud-focused investigations during security incidents - Improve forensic readiness in AWS - Harden logging and evidence retention practices - Automation and Continuous Improvement - Automate guardrails and enforcement mechanisms - Improve developer experience with secure cloud defaults - Reduce manual cloud security reviews - Optimizing tooling cost and effectiveness - Metrics and Reporting - Define KPIs for cloud security posture - Report on misconfiguration trends and exposure windows - Provide executive-level reporting on infrastructure risk - Support audit and compliance evidence collection Qualifications - Required - 7+ years of experience in cloud security, cloud engineering, or infrastructure security - Deep expertise in AWS architecture and services - Strong understanding of IAM design and least-privilege principles - Experience with Infrastructure as Code and CI/CD integration - Experience implementing cloud-native detection and monitoring - Ability to translate infrastructure risk into business impact - Preferred - Experience in mid-market or high-growth SaaS environments - Experience supporting SOC 2 or similar audits - Familiarity with policy-as-code frameworks - Experience building multi-account AWS environments - Relevant certifications such as AWS Security Specialty, CISSP, or equivalent Benefits - $130,000 to $150,000 base salary + bonus opportunity - Great Healthcare + Dental + Vision - Flexible PTO - Culture of support, encouraging Life-Work balance - 401k match - FSA and HSA options - Employee Assistance Program - Paid Parental Leave - Representing a company with 4,000+ clients and a 99% retention rate - Accelerated title and salary growth potential - A fun and energetic work environment that makes you excited to go to work every day