Senior Security Engineer - Controls, Compliance & Cloud Security

Metergy Solutions•Toronto, ON

17h•CA$120,000 - CA$140,000•Onsite

About The Position

Metergy Solutions Inc. is seeking a hands-on Senior Security Engineer – Controls, Compliance & Cloud Security to join their team as a senior technical individual contributor. This role is responsible for strengthening the organization’s security posture through security engineering, control implementation, audit support, and continuous improvement across cloud and enterprise environments. The successful candidate will work closely with infrastructure, cloud, and application teams to assess and improve technical security controls, support internal and external audits, perform control testing and evidence collection, drive vulnerability management activities, participate in incident response, and administer key security technologies spanning IAM, data protection, threat monitoring, and email security. Strong expertise in Microsoft Azure, Microsoft 365, Microsoft Exchange, Proofpoint, and practical security operations is essential. This is an ideal opportunity for a highly technical security professional who enjoys hands-on engineering work, control assurance, and solving complex operational security challenges.

Requirements

6+ years of hands-on experience in cybersecurity, security engineering, cloud security, control implementation, audit support, incident response, and vulnerability management.
Strong understanding of regulatory frameworks such as CIS, SOC, NIST, and similar standards.
Experience with governance automation, control validation, and policy enforcement tools.
Proven expertise in Microsoft Azure Cloud architecture, Microsoft 365, Microsoft Exchange, Proofpoint, and cloud management processes.
University degree from a recognized institution or equivalent practical experience, with strong technical experience in cybersecurity, infrastructure, and cloud environments.
Strong working knowledge of cloud platforms such as Microsoft Azure, AWS, and Google Cloud, along with identity, networking, endpoint, and collaboration security concepts.
Excellent analysis, problem-solving, team, conflict management, and time management skills.
Outstanding verbal and written communication skills.
Experience managing or delivering IT services within outsourced and managed services environments.
Proven expertise with cloud-hosted technology and thorough understanding of IT security, networking principles, incident response practices, vulnerability remediation workflows, and email security controls.
Experience supporting security assessments, control reviews, audit evidence requests, and remediation activities in regulated or compliance-driven environments.
Strong collaboration and interpersonal skills, with the ability to work effectively across technical teams, audit stakeholders, vendors, and business partners.

Responsibilities

Act as a senior technical contributor responsible for implementing, maintaining, and improving security controls across cloud and enterprise environments to reduce risk and support compliance objectives.
Partner with infrastructure and application teams to embed security by design in all cloud and on-premise initiatives.
Translate security and compliance requirements into practical technical controls, standards, and baselines for cloud and on-premise IT infrastructure and collaboration platforms, including Microsoft 365.
Execute audit and control assurance activities, including risk assessments, control testing, evidence collection, vulnerability management tracking, and remediation follow-up to maintain compliance and reduce security risk.
Administer and enhance Identity and Access Management (IAM), data protection, threat monitoring, incident response activities, and email security capabilities across the organization.
Administer, troubleshoot, and improve email security operations, including technical configuration and optimization of Proofpoint and Microsoft Exchange protections for phishing defense, email hygiene, secure mail flow, and threat remediation.
Recommend and implement technical and procedural improvements that strengthen control effectiveness, audit readiness, organizational resilience, and overall security posture.
Maintain and administer infrastructure security processes, including secure configuration, add/moves/changes to Active Directory, storage systems, Azure cloud, servers, network, application hosting, backup, server patching, and related control enforcement activities.
Provide technical security input to vendor assessments, solution reviews, and control evaluations to ensure new and existing services align with security and compliance requirements.
Perform security control and audit support activities, including control mapping, evidence preparation, issue remediation tracking, and alignment to frameworks such as CIS, SOC, NIST, and related standards.
Serve as a senior technical security resource supporting secure configuration, hardening, remediation, and control maturity across infrastructure, cloud platforms, identity services, and core enterprise systems.
Provide technical guidance on security standards, control requirements, and implementation approaches that align with business, regulatory, and audit expectations.
Assess technical security requirements for new solutions and services, participate in architecture and design reviews, and validate that implementations meet defined control and compliance expectations.