Information Security Engineer

Croft Software has an opening for an Information Security Engineer. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. This role is fully remote within Canada. Flexible schedule. We have one team call a day, usually in the morning.

Your responsibilities

• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Assess third-party vendors and SaaS integrations for security risk
• Triage bug bounty reports from HackerOne or Bugcrowd
• Write secure coding guidelines and run developer training
• Run threat modeling sessions with engineering teams on new features and architecture changes

You'll need

• 2-4 years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Ability to explain security issues to engineers without lecturing them
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Hands-on cloud security experience in AWS, Azure or GCP

Why work with us

Salary: $134,000 - $173,000 a year

• Extended health and dental benefits
• RRSP matching
• Three weeks paid vacation to start
• Professional development budget

A bit about us

More than 9,000 organizations use our HR and payroll suite, from regional hospitals to school districts. Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. Laptops are MacBook Pros, and you pick your own editor.

Interview process: a phone call, a meeting with the hiring manager, and a final conversation with the team.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Croft Software Inc..