Senior Cybersecurity Specialist

DEG Services • Vaughan, ON

2d • CA$110,000 - CA$120,000

About The Position

DEG Services is the centralized shared services provider supporting a group of industry-leading companies delivering end-to-end solutions across land development, civil infrastructure, and construction. As the operational backbone, DEG drives alignment, efficiency, and consistency through integrated support in Human Resources, Information Technology, and Marketing.

We are hiring a hands-on cybersecurity professional with strong technical depth to implement, operate, and continuously improve security controls across Microsoft cloud and endpoint platforms. This individual contributor role reports to the Application Manager and partners closely with IT leadership to execute cybersecurity priorities, strengthen operations, and advance the security roadmap. The focus is on delivering measurable outcomes through day-to-day security operations, threat readiness, and resilience.

Requirements

• 5 to 7+ years of experience in cybersecurity, information security, or related technical security roles.
• Hands-on experience with Microsoft security and management platforms such as Entra ID, Intune, Microsoft Defender, and Purview.
• Strong technical understanding of identity and access management, endpoint protection, cloud security, data protection, vulnerability management, and incident response.
• Demonstrated ability to work as a strong individual contributor by managing priorities independently while collaborating effectively with managers, peers, and senior stakeholders.
• Experience supporting security operations, investigations, control improvements, and remediation activities in a Microsoft-centric enterprise environment.
• Experience working across cross-functional teams and with external vendors or managed service providers.
• Ability to translate technical findings and risks into practical, business-aligned recommendations for both technical and non-technical audiences.
• Clear, professional communication skills and the ability to work closely with IT leadership on priorities, status updates, and recommendations.
• Highly organized, self-driven, and able to manage multiple priorities in a dynamic environment.

Nice To Haves

• Relevant industry certification is preferred (e.g., CISSP, SC-200, SC-300, AZ-500, or equivalent).

Responsibilities

• Execute cybersecurity initiatives across key domains, including identity and access management, endpoint security, cloud security, data protection, security awareness, and threat readiness, with a focus on practical and measurable outcomes.
• Serve as a hands-on cybersecurity subject matter expert, supporting the Application Manager, IT leadership, and internal teams on security controls, risks, and remediation priorities.
• Administer and optimize Microsoft security technologies such as Entra ID, Intune, Microsoft Defender, and Purview, while supporting integration with other enterprise security tools as required.
• Monitor and improve the organization’s security posture through alert triage, incident investigation, vulnerability management, secure configuration reviews, and ongoing tuning of security controls.
• Support incident response activities, including investigation, containment, remediation, documentation, and post-incident improvement actions.
• Work closely with IT leadership to help operationalize cybersecurity priorities, provide input into security planning, and report on key issues, risks, and opportunities to improve controls.
• Collaborate with infrastructure, applications, service providers, and external vendors to ensure security requirements are implemented consistently and operational issues are addressed effectively.
• Coordinate penetration tests, security assessments, and remediation tracking to ensure findings are addressed in a timely and practical manner.
• Contribute to the development and maintenance of cybersecurity policies, standards, procedures, and technical baselines aligned with organizational requirements.
• Perform security reviews, risk assessments, and vendor evaluations to identify gaps, recommend controls, and support informed decision-making.
• Support audit readiness, evidence collection, and remediation follow-up to improve control maturity and compliance outcomes.
• Help strengthen security culture through awareness activities, phishing simulations, user guidance, and the continuous reinforcement of good security practices.

Benefits

• Permanent, full-time role with real opportunities for growth and long-term career development.
• Hands-on experience working across multiple brands and industries.
• Be part of a positive, people-first culture where your ideas are encouraged and your work is recognized.
• A diverse and robust suite of benefits and perks.
• Pension plan matching up to 5%.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed