2 days ago
Calgary, Canada or Vancouver, CanadaSenior
Responsibilities
- Architect, design, and implement secure architectures for applications, infrastructure, and AWS and GCP cloud environments.
- Define secure design principles, reusable patterns, architectural standards, technical guidelines, and procedures.
- Represent Security in architecture decision and review processes and assess high-level architecture proposals.
- Conduct risk assessments and threat modeling for products, infrastructure, and major architectural initiatives.
- Embed security best practices into the software development lifecycle and promote a security-conscious culture.
- Support technical security incident response, including investigation, containment, and remediation.
- Implement security controls as code using Terraform and related infrastructure-as-code tools for cloud and edge protections such as WAF.
- Provide guidance on secure network, system, identity, and cloud configurations.
- Conduct vendor security architecture reviews and evaluate security tools for endpoint, application, and cloud security.
- Oversee security monitoring, logging, incident detection, SIEM tuning, and response capabilities.
- Ensure alignment with NIST, ISO 27001, SOC 2, GDPR, and other applicable regulations and standards.
- Train and mentor engineering teams and provide technical mentoring to security team members.
Requirements
- Bachelor’s or master’s degree in cybersecurity, computer science, or a related field, or relevant equivalent experience.
- At least 6–8+ years of experience in security architecture, security engineering, or security operations, focused on architecture and design.
- Demonstrable experience mentoring engineers and security peers.
- Expertise in cloud security, with AWS and GCP preferred.
- Strong knowledge of identity and access management, encryption, firewalls, SIEM tuning, and EDR solutions.
- Hands-on experience with Docker, Kubernetes, Terraform, infrastructure as code, and DevSecOps practices.
- Proficiency with MITRE ATT&CK, CIS Controls, and Zero Trust Architecture.
- Familiarity with penetration testing, vulnerability assessments, and forensics.
- Strong scripting and automation skills in Python, PowerShell, or Bash.
- Certifications such as CISSP, CISM, CEH, or AWS Security Specialty are preferred.
- Experience in highly regulated industries such as finance, healthcare, or government is preferred.
- Understanding of AI security risks and securing AI-enabled systems and workflows is preferred.
- Experience with security automation and SOAR technologies, SIEM tuning, and response workflows is preferred.
Benefits
- Flexible hybrid work with no fixed in-office requirement for employees near an office.
- Innovative work, growth opportunities, supportive co-workers, and purpose-driven technology.
- Employee resource groups and a strong focus on diversity, equity, inclusion, and belonging.
- Accessible hiring and assessment accommodations are available for candidates with disabilities.
Tech Stack
Categories
About Benevity
Benevity builds an enterprise SaaS platform for corporate social impact, covering employee giving, volunteering, grants management, ERGs, and donation processing with global charity vetting. Companies use it to run and measure programs for employees and customers, with integrations and payment rails. Founded in 2008 and headquartered in Calgary, it is privately held and part of Hg’s portfolio, serving many large, multinational brands.