{"id":1929917,"url":"https://alion.io/job/numeris-information-security-engineer-cloud-contract-2","title":"Information Security Engineer (Cloud) - Contract","company":{"id":682431,"name":"Numeris","domain":"numeris.ca","url":"https://alion.io/company/numeris","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":85000,"max":90000,"currency":"CAD","period":"year","gross":null,"usd_annual":63112},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false}],"status":"live","first_seen_at":"2026-10-05T20:39:55Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-10T23:14:41Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Numeris is seeking a collaborative, detail-oriented Cloud Security Analyst to support our multi-cloud posture, vulnerability management lifecycle, and cybersecurity risk governance.\nIn this role, you will bridge technical security tooling, operational governance, and day-to-day security service delivery. You will monitor and strengthen security posture across AWS, Azure, and Microsoft 365, evaluate change requests for cyber risk, conduct security risk assessments, manage intake for security requests, and partner with internal engineering and IT teams to drive identified risks, vulnerabilities, and hardening recommendations through to remediation.\nWhat you will do\nCloud Security Posture & Hardening (AWS, Azure & M365):\n\nMonitor and operate Cloud Security Posture Management (CSPM) tooling to identify high-priority misconfigurations, network exposures, and toxic risk combinations across AWS and Azure.\n\nContinuously monitor and improve Microsoft Secure Score, driving actionable configuration enhancements across Entra ID, Defender, and Purview.\n\nPartner directly with internal DevOps, Infrastructure, and Systems teams to translate posture findings into clear remediation tasks, track remediation timelines, and verify fixes.\n\nImplement and maintain cloud hardening baselines, data boundaries, and security guardrails-including over-permissioning reviews and sensitivity controls supporting Microsoft 365 Copilot and multi-cloud environments.\n\nCyber Risk, Change Assessment & Request Handling:\nManage security intake by evaluating, triaging, and responding to day-to-day security requests, access exceptions, and technical risk inquiries from business and technical teams.\n\nPerform technical cyber risk assessments for new vendors, cloud architectures, and third-party SaaS integrations.\n\nReview proposed infrastructure and IT change requests (CAB) to evaluate security impacts, network perimeter exposure, and identity/access risks.\n\nDocument risks, track exceptions, and collaborate with system owners to establish practical compensating controls and standard operating procedures (SOPs).\n\nVulnerability Management & Operations Support:\nCoordinate vulnerability management workflows: prioritize vulnerabilities using risk and exploitability context, assign remediation tasks to asset owners, and validate patches.\n\nProvide operational administration for core security tooling (Defender suite, Entra ID, Purview, KnowBe4).\n\nAuthor and maintain operational runbooks, security guidelines, and triage procedures to streamline day-to-day security workflows.\n\nSupport security operations with alert triage, investigation assistance, and operational incident follow-ups as needed.\n\nWhat you have\n\n3+ years of hands-on experience in cybersecurity, cloud security analysis, vulnerability management, or security operations (SOC/SecOps).\n\nDirect operational experience working within Microsoft 365 security portals (Entra ID, Microsoft Defender, Purview).\n\nPractical familiarity with AWS and/or Azure core security principles (IAM, security groups, resource hardening).\n\nProven experience managing security request intake, evaluating risk exceptions, and authoring standard operating procedures (SOPs), runbooks, and process documentation to improve operational consistency.\n\nDemonstrated ability to collaborate constructively with internal technical teams (IT, DevOps, Engineering) to facilitate and track vulnerability/misconfiguration fixes.\n\nTechnical Knowledge:\nSolid working understanding of Cloud Security Posture Management (CSPM) concepts and SaaS security hygiene.\n\nFamiliarity with identity security controls (MFA, Conditional Access, least-privilege RBAC).\n\nStrong understanding of technical risk assessments, IT change management processes, and request ticketing workflows.\n\nBaseline understanding of data protection and permission governance for modern AI productivity tools.\n\nSoft Skills & Core Competencies:\nCollaborative Influence: Ability to build positive relationships with DevOps, IT, and software engineering teams, driving remediation through partnership rather than acting as a blocker.\n\nPragmatic Risk Prioritization: Strong analytical judgment to filter through alert noise, distinguish critical business risks from low-impact findings, and avoid \"alert fatigue.\"\n\nClear & Empathetic Communication: Skill in translating technical cyber risks into clear, business-friendly language for non-technical stakeholders and system owners.\n\nCuriosity & Adaptability: A proactive mindset for learning emerging platforms, evaluating new cloud features, and staying updated on evolving AI and SaaS security practices.\n\nOrganizational Discipline: Ability to juggle multiple intake requests, triage queues, and remediation follow-ups systematically without letting tasks slip through the cracks.\n\nPreferred Certifications (Asset):\nMicrosoft SC-200, SC-300, or AZ-500\n\nCompTIA Security+ or CySA+\n\nAWS Certified Cloud Practitioner or Solutions Architect Associate\n\nWhat's in it for you?\nBe part of an evolutionary journey in the audience measurement and data space; work on exciting projects, add value & make a positive impact to our Company.\nCompetitive salary and benefits package (Health, Dental, Vision and Personal Spending Account - employer paid premiums).\nFlexible Work location (on-site offices in Toronto and Montreal, remote - work from home, hybrid as required per role).\nContinuous learning and developmentvia Percipio, our Learning Management System.\nBe part of additional programs such as MentorMe, which helps our employee’s network, and grow within the organization.\nLeadership Training offerings for new and emerging leaders.\nCultureof great teams, coworkers and supportive leadership.\nPerkopolis: Participation in a program that provides exclusive discounts on products and services to employees. Perks include shopping discounts, movie tickets, services, event/show tickets and much more!","description_format":"text","description_chars":5922,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Media & Audience Measurement"],"lifecycle":[{"event":"open","at":"2026-10-05T21:33:40Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.887,"p_room":1,"age_days":4,"expected_fill_days":33,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-10T05:45:15Z"},"pay":{"stated_usd_annual":63112,"is_top_pay":false},"html_url":"https://alion.io/job/numeris-information-security-engineer-cloud-contract-2","json_url":"https://alion.io/job/numeris-information-security-engineer-cloud-contract-2.json","meta":{"generated_at":"2026-10-11T02:13:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3430,"day_limit":5000,"remaining_today":1570,"minute_limit":60,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":682431},"rest":"https://alion.io/mcp/rest/get_company?id=682431"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnumeris-information-security-engineer-cloud-contract-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnumeris-information-security-engineer-cloud-contract-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnumeris-information-security-engineer-cloud-contract-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/numeris-information-security-engineer-cloud-contract-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnumeris-information-security-engineer-cloud-contract-2"}]}