Cybersecurity Engineer
About The Position
CadMakers is seeking a proactive and hands-on Cybersecurity Analyst to join their IT and Development teams. This role is crucial for maintaining the security of their platforms and digital infrastructure as the company scales. The ideal candidate will be resourceful, adept at solving complex security challenges, remain calm under pressure, adapt quickly to new threats, and think like an attacker to protect systems. Responsibilities include taking ownership of network and application security, developing security policies, and independently managing infrastructure. Knowledge of SOC 2 frameworks and RMM systems is essential. The company is an industry-leading digital construction and manufacturing technology company founded in 2014, headquartered in Burnaby, British Columbia, Canada, with its flagship product being cmBuilder.io, a web-based tool for 3D site logistics planning and 4D simulations.
Requirements
- Minimum of 3 years of practical experience in network security, focusing on application security.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Security and Assurance, Network Engineering, Computer Engineering, or Software Engineering
- Proficiency in Microsoft Office 365 Admin Center and all Azure cloud services.
- In-depth knowledge and hands-on experience in Office 365, Azure infrastructure, Microsoft Intune, and Entra Domain Services (formerly AAD) (Entra ID)
- In-depth understanding and hands-on experience of on-premises and cloud security, including Microsoft tools and frameworks such as Sentinel and Microsoft Defender.
- Experience automating end device deployment and managing security patches.
- Knowledge of NIST, ISO 27001, CIS Controls, SOC2 and regulatory requirements.
- Experience with Python, Bash and PowerShell scripting.
- Experience with C#, React and secure coding practices.
- Experience with Linux operating systems and security software.
- Experience with Kubernetes.
- Proficiency in DevOps tools and practices, including CI/CD pipelines and containerization.
- Strong Critical Thinker & Risk Assessor: Exceptional analytical and problem-solving abilities to evaluate risks, weigh trade-offs, and design practical mitigation strategies.
- Effective Communicator: Ability to translate complex security risks into clear, understandable language for non-technical teams and leadership.
- Self-Motivated & Autonomous: Capable of prioritizing tasks independently, taking full ownership of projects, and driving security initiatives without micro-management.
- Team Player & Collaborative: Works constructively across departments, bridging the gap between security needs and practical software development goals.
- Adaptable & Fast-Learning: Eager to continuously master new tools, keep up with new threats, and thrive in a fast-paced environment.
Nice To Haves
- Knowledge of SOC 2 frameworks and RMM systems is essential.
Responsibilities
- Participate in IT sprint planning to ensure security tasks, enhancements, and remediation efforts are continuously integrated into team workflows.
- Maintain and align posture with industry security standards and frameworks (SOC2, ISO 27001, NIST, CIS Controls).
- Work closely with software developers to provide clear, actionable solutions (with pros and cons) for identified security weaknesses.
- Manage and improve cloud hosting infrastructure in Azure as well as on-premises environments.
- Adapt and step into various IT and security responsibilities as needed to help protect and grow the organization.
- Perform regular vulnerability assessments and deep dives across systems and applications.
- Monitor, respond to, and triage security incidents in real time.
- Set up automated auditing, alerts, and notifications across our entire infrastructure using KQL or other log query languages.
- Develop and implement a modern Zero Trust security model across our networks.
- Automate end-device deployments and security patch management using RMM software and custom scripts to stay ahead of new CVEs.
- Commit to ongoing learning to keep pace with evolving technological capabilities and emerging cybersecurity threat vectors.
Benefits
- Extended comprehensive health, dental, vision, travel and life insurance coverage for you and your family
- Three weeks paid vacation
- Access and funding for resources to grow and #getbettereveryday.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
