Cybersecurity Engineer

EBlock Inc.•Toronto, ON

5d•Hybrid

About The Position

E INC is the parent company of EBlock and EDealer, unifying our approach to products, services, and strategies under one Vision and one Mission: to create the best digital auction and retailing platform in the world by connecting the automotive wholesale and retail experiences. Our brands and their technologies make it easy for a vehicle to move between buyers and sellers throughout its entire ownership lifecycle. We are seeking an experienced, detail-oriented Cybersecurity Engineer to strengthen our organization’s information security posture across endpoints, networks, cloud services, and applications.

Requirements

3–5 years of experience in cybersecurity or a similar technical security role.
Hands-on experience managing and securing workloads in AWS (e.g., IAM, security groups, Cloud Trail, VPC/networking, Security Hub, Inspector, logging/monitoring, and encryption).
Strong understanding of SIEM, endpoint protection, and network security principles.
Hands-on experience with Zscaler, SentinelOne, and Cloudflare (or comparable technologies) for secure access, endpoint protection, and web application security.
Practical experience remediating vulnerabilities in existing applications, including updating or replacing vulnerable endpoint/application packages and libraries and validating fixes with monitoring and logs.
Knowledge of incident response frameworks and playbook/runbook development.
Experience providing, organizing, or managing SOC 2 technical evidence and working with auditors or external assessors.
Excellent troubleshooting, analytical, and problem-solving skills.
Ability to work independently in fast-paced environments with minimal supervision.
Valid driver’s license and ability to travel as required.
Languages: English (required), French (an asset)

Nice To Haves

Experience with additional cloud platforms (e.g., AWS, GCP) and multi-cloud security patterns.
Background supporting compliance programs such as SOC 2, ISO 27001, and NIST-based frameworks.
Experience working with ITSM and asset management tools (e.g., FreshService), MDM platforms (e.g., Hexnode), and SaaS / cost management tools (e.g., Trelica).

Responsibilities

Own threat and vulnerability management, driving remediation of misconfigurations and weaknesses across our environment.
Manage and tune our security monitoring and incident response capabilities using SIEM and observability tools (for example, Datadog and log pipelines).
Administer our endpoint, web, and Zero Trust security stack, including SentinelOne for EDR/CNAPP, Zscaler for secure access and DLP, and Cloudflare for WAF, DNS, and Zero Trust web security.
Support compliance and governance efforts (with a focus on SOC 2, and exposure to frameworks like ISO 27001 and NIST).
Work closely with development and cloud teams to secure workloads in AWS and fix vulnerable packages and dependencies in existing applications, not just new builds.
Collaborate closely with IT, infrastructure, and application teams to design, implement, and continuously improve security controls that are practical, measurable, and audit-ready.
Identify, assess, and prioritize vulnerabilities and misconfigurations across endpoints, networks, cloud environments, and applications.
Work with infrastructure and application owners to define and maintain secure configuration baselines and ensure timely remediation.
Use vulnerability management and configuration assessment tools (including data from platforms like SentinelOne, cloud-native security services, and code-repository/package alerts) to track progress and risk reduction over time.
Partner with development teams to review and remediate vulnerable third-party packages and libraries in existing applications (e.g., upgrading dependencies, adjusting configurations, and validating fixes).
Configure, manage, and tune SIEM / security monitoring solutions (for example, Datadog, cloud logs, and other telemetry sources) to ensure high-quality, actionable alerts.
Act as an escalation point for high-severity security incidents, including triage, containment, investigation, and recovery.
Maintain and improve Incident Response (IR) runbooks and procedures, including playbooks for phishing, malware, account compromise, and data exfiltration.
Participate in and help design Disaster Recovery (DR) and Business Continuity Planning (BCP) tabletop exercises, ensuring security scenarios are built into testing.
Administer and optimize SentinelOne for endpoint detection and response, ensuring policies, detections, and exclusions are well-tuned.
Configure and manage Zscaler (Internet, Private Access, and DLP modules) to enforce secure internet and application access and prevent data loss.
Oversee Cloudflare security configurations for web applications and network services (including Zero Trust, WAF, DNS, and related controls).
Work with cloud and infrastructure teams to secure AWS workloads (e.g., IAM, security groups, network segmentation, logging, and encryption) and to integrate security controls into existing services running on AWS.
Collaborate with network and infrastructure teams to ensure Zero Trust and defense-in-depth principles are consistently applied across offices, remote users, and auction environments.
Collaborate with developers and product teams to understand application architectures and remediate security findings in existing services, including: Updating or replacing vulnerable packages and libraries, Adjusting application and container configurations, and Validating fixes with follow-up testing and monitoring.
Provide security input into change management processes, ensuring significant changes consider security impact and include an appropriate rollback and validation plan.
Contribute to secure coding and dependency management guidance that is practical for teams maintaining existing systems.
Support SOC 2 and related compliance programs by maintaining and providing technical evidence of security controls (e.g., logs, reports, screenshots, and configuration exports).
Work with internal stakeholders and external auditors to ensure security measures align with SOC 2, ISO 27001, and NIST-aligned controls where applicable.
Enhance, document, and automate security controls to ensure continuous audit readiness, leveraging systems such as FreshService (for tickets, changes, and asset records) and Trelica (for SaaS visibility and contract mapping).
Manage and improve email security configurations (phishing protection, DKIM/SPF/DMARC, impersonation protection, safe links/attachments).
Implement and tune data loss prevention (DLP) and encryption controls across endpoints, email, and web traffic (for example, via Zscaler, Cloudflare, and endpoint agents).
Partner with Hexnode MDM and IT operations to enforce device posture and encryption requirements for managed endpoints.
Provide security guidance during new technology evaluations, deployments, and changes, especially those impacting AWS-hosted services and existing applications.
Travel up to 25% (including occasional visits to offices or auction sites) to support assessments, deployments, training, and incident/BCP exercises.