Security Engineer

Position summary:

We are adding headcount to this team, so this is a new seat. The Detection and Response team is small and hands-on. We need someone who writes code and automation, not just policy. Thornpoint Threat Labs is hiring for the Security Engineer role to secure our cloud infrastructure and the applications that run on it. Hybrid: two days in the office in Quebec City, the rest from home.

In this role you will:

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Review code and pull requests for security issues
• Coordinate external penetration tests and track remediation
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Own secrets management, key rotation and KMS policies

Required qualifications:

• 2+ years in security engineering, application security or a related engineering role
• Experience with SIEM, EDR or vulnerability management tools
• Programming or scripting ability in Python, Go or similar
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Pay and benefits:

• Extended health and dental benefits
• RRSP matching
• Three weeks paid vacation to start
• Professional development budget
• Annual bonus
• Employee and family assistance program
• Paid vacation

About Thornpoint Threat Labs:

Incident response is a big part of the work: ransomware recovery, business email compromise and forensic investigations. Identity and access management projects, mostly Okta and Entra ID rollouts, have been part of the business since 2004. Training budget covers one SANS course or equivalent per year.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Thornpoint Threat Labs.