Cybersecurity Engineer

Buckland is looking for a Cybersecurity Engineer

What you’ll be doing

We are seeking a proactive Cybersecurity Engineer to design, build, and maintain the security posture of our IT environments. This is not a purely reactive monitoring role, we’re looking for professionals who identifies risk before it becomes an incident, strengthens our systems continuously, and leads response efforts when issues do arise.

You'll operate at the intersection of security operations, IT, and governance, monitoring and responding to threats, while also architecting the tools, controls, and processes that prevent them in the first place. The Engineer will monitor, design, and optimize security measures, troubleshoot issues, and implement best practices to strengthen the company’s digital footprint.

What we can offer you

Competitive, salary, benefits package, and matching retirement plan.

Compensation range: $90,000–115,000 annually (subject to experience)]

A friendly, collaborative work environment.

Opportunities for professional development & ongoing learning.

A chance to be part of a growing organization.

Remote work arrangement is available for applicants who are not local to a Buckland office.

You will be responsible for

Security Operations & Incident Response:

Monitor security alerts and incidents across IT using SIEM and EDR tools

Perform triage, investigation, and escalation of detected security events

Lead incident response activities; containment, eradication, and recovery

Conduct root cause analysis following incidents and drive corrective actions

Maintain clear, thorough documentation of incidents, findings, and remediation steps

Security Engineering & Tool Management:

Deploy, configure, and maintain security technologies: firewalls, endpoint protection, network segmentation, and vulnerability scanners

Tune detection and automation rules within SIEM/SOAR platforms to improve visibility and response times

Partner with IT and business units to balance operational uptime with security best practices

Governance, Risk & Compliance:

Lead and support implementation of cybersecurity standards, including ISO 27001

Lead ISO 27001 audits, compliance reporting, and control testing

Contribute to development and enforcement of security policies, procedures

Maintain the risk register, perform risk assessments, and track mitigation progress

Design and implement Zero Trust principles across network and cloud systems

Awareness & Culture

Support rollout of company-wide information security strategy

Deliver and coordinate security awareness and training initiatives

Promote a security-conscious culture across IT, Warehouse, and Business Teams

Collaboration & Reporting

Work cross-functionally with infrastructure, cloud, and application teams to embed security into operational workflows

Prepare dashboards, reports, and metrics on security operations and tool performance

Third-Party & Vendor Security

Support vendor security assessments and Onboarding/Offboarding

Ensure security requirements are understood and met in supplier engagements

Monitor third-party compliance and risk mitigation activities

Continuous Improvement

Evaluate emerging security technologies and methodologies

Recommend and deploy new tools to strengthen the overall cybersecurity program

What we need from you

Bachelor’s degree in information security, Computer Science, Engineering, or related field (or equivalent practical experience)

5+ years of experience in cybersecurity operations, security engineering, or industrial network security

Hands-on experience with SIEM (e.g., Rapid7, Microsoft Sentinel) and EDR (e.g., Sophos, Defender for Endpoint)

Experience with vulnerability management tools (e.g., Rapid7)

Working knowledge of firewalls (FortiGate, Palo Alto), IDS/IPS, and network segmentation

Solid understanding of Windows, Linux, and industrial control system architectures

Scripting/automation experience (PowerShell, Python, or Bash) preferred

Familiarity with cloud platforms (Azure, AWS) and secure connectivity in hybrid environments

Experience designing and implementing Zero Trust architecture

Experience hardening servers and network devices

Experience implementing cloud-native security controls (Security Groups, IAM policies, Azure AD Conditional Access)

Required: CompTIA Security+, GICSP, or a GIAC certification (e.g., GCIA, GCIH)

Preferred: CISSP or CISM

Must be available to provide emergency support outside regular business hours when urgent security matters arise.

Strong analytical and troubleshooting skills in complex, networked environments

Excellent communication skills with both technical and non-technical stakeholders

Ability to balance security priorities with operational continuity

Collaborative, proactive problem-solving mindset

Must be legally eligible to work for the Company at all times.

Valid Passport ability to occasionally travel if required to other offices locations in CAD/USA/MEX.