Security Engineer

Overview CMA CGM Montreal is seeking a skilled Security Engineer to join the Global Cybersecurity team who will be responsible for securing our digital infrastructure, services, and applications across multiple environments, ensuring the confidentiality, integrity, and availability of cloud-based resources. This role is instrumental in safeguarding our cloud ecosystems and enabling secure business innovation. ALL CANDIDATES MUST BE LEGALLY AUTHORISED TO WORK IN CANADA: VALID WORK PERMIT, PERMANENT RESIDENT OR CITIZEN Responsibilities Design and implement security controls and solutions across public, private, and hybrid environments. Apply and maintain security baselines, guardrails, reference architectures, and security blueprints aligned with industry best practices. Perform security assessments using recognized frameworks, identifying risks and developing mitigation and remediation roadmaps. Collaborate with engineering and DevOps teams to integrate security into CI/CD pipelines and enable secure DevOps practices. Contribute to enabling monitoring, detecting, and responding to security threats and misconfigurations. Develop Identify and Access Management (IAM) policies, ensuring proper role-based access control, least privilege, and identity federation. Contribute to security strategy and roadmap by identifying emerging threats, opportunities for automation, and process improvements. Contribute to maintaining compliance with regulatory and industry standards such as ISO 27001, NIST, SOC 2, CIS Benchmarks, and GDPR. Support architecture and application teams by providing security guidance on architecture reviews, threat modeling, and risk assessments. Evaluate and implement security technologies, including workload protection, data loss prevention (DLP), encryption, container security, and secrets management. Collaborate with internal stakeholders to create and enforce security policies, standards, and procedures. Stay current with evolving security trends, threat landscapes, and vendor roadmaps to ensure proactive risk management. Qualifications ALL CANDIDATES MUST BE LEGALLY AUTHORISED TO WORK IN CANADA: VALID WORK PERMIT, PERMANENT RESIDENT OR CITIZEN Education Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related cybersecurity field. Cybersecurity & Cloud security Certifications are an asset Knowledge & Experience Engineering across enterprise-scale environments. Experience working with multi-domain and hybrid infrastructures is highly valued. Experience with automated security tooling, cloud-native logging, and infrastructure-as-code (IaC) security is required. Strong hands-on knowledge of at least one major cloud provider (AWS, Azure, or GCP) and its security capabilities. Familiarity with security frameworks and compliance standards. Proficiency in implementing and managing security solutions in different environments and setups. Experience with cloud-native security tools such as AWS Security Hub, Azure Defender, GCP Security Command Center, or third-party platforms. Working knowledge of containers and Kubernetes security is considered an advantage. Experience implementing IAM controls, including RBAC, least privilege, and identity federation. Other Detail-oriented, analytical, and proactive in identifying and resolving cloud security issues. Strong collaboration and communication skills, working seamlessly with cross-functional teams including DevOps, infrastructure, and compliance. You thrive in a fast-paced, cloud-first environment. Strong problem-solving capabilities. Prioritize work effectively, managing time and competing demands efficiently. English required and French language is an asset. Compliance and Equality We thank all candidates for their interest in applying for this position and working at CMA CGM. Please note, only those selected for an interview will be contacted. We are an equal opportunity employer Benefits A culture based on respect and focus on Better Ways for the employees 20 days of paid time off Tuition reimbursement RRSP plan - Max contribution of 12% and the company matches at 50% A competitive benefits plan - fully paid by the company. This includes: Extended Health (for employee, spouse & children) Dental (for employee, spouse & children) Long Term Disability AD&D Critical Illness (for employee, spouse & children) Life Insurance Employee & Family assistance program Health and Wellness site and Program #J-18808-Ljbffr