Cybersecurity Engineer

Buckland is looking for a Cybersecurity Engineer

What you’ll be doing
We are seeking a proactive Cybersecurity Engineer to design, build, and maintain the security posture of our IT environments. This is not a purely reactive monitoring role, we’re looking for professionals who identifies risk before it becomes an incident, strengthens our systems continuously, and leads response efforts when issues do arise.
You'll operate at the intersection of security operations, IT, and governance, monitoring and responding to threats, while also architecting the tools, controls, and processes that prevent them in the first place. The Engineer will monitor, design, and optimize security measures, troubleshoot issues, and implement best practices to strengthen the company’s digital footprint.
What we can offer you

Competitive, salary, benefits package, and matching retirement plan.
Compensation range: $90,000–115,000 annually (subject to experience)]
A friendly, collaborative work environment.
Opportunities for professional development & ongoing learning.
A chance to be part of a growing organization.
Remote work arrangement is available for applicants who are not local to a Buckland office.

You will be responsible for

Security Operations & Incident Response:
Monitor security alerts and incidents across IT using SIEM and EDR tools
Perform triage, investigation, and escalation of detected security events
Lead incident response activities; containment, eradication, and recovery
Conduct root cause analysis following incidents and drive corrective actions
Maintain clear, thorough documentation of incidents, findings, and remediation steps
Security Engineering & Tool Management:
Deploy, configure, and maintain security technologies: firewalls, endpoint protection, network segmentation, and vulnerability scanners
Tune detection and automation rules within SIEM/SOAR platforms to improve visibility and response times
Partner with IT and business units to balance operational uptime with security best practices
Governance, Risk & Compliance:
Lead and support implementation of cybersecurity standards, including ISO 27001
Lead ISO 27001 audits, compliance reporting, and control testing
Contribute to development and enforcement of security policies, procedures
Maintain the risk register, perform risk assessments, and track mitigation progress
Design and implement Zero Trust principles across network and cloud systems
Awareness & Culture
Support rollout of company-wide information security strategy
Deliver and coordinate security awareness and training initiatives
Promote a security-conscious culture across IT, Warehouse, and Business Teams
Collaboration & Reporting
Work cross-functionally with infrastructure, cloud, and application teams to embed security into operational workflows
Prepare dashboards, reports, and metrics on security operations and tool performance
Third-Party & Vendor Security
Support vendor security assessments and Onboarding/Offboarding
Ensure security requirements are understood and met in supplier engagements
Monitor third-party compliance and risk mitigation activities
Continuous Improvement
Evaluate emerging security technologies and methodologies
Recommend and deploy new tools to strengthen the overall cybersecurity program

What we need from you

Bachelor’s degree in information security, Computer Science, Engineering, or related field (or equivalent practical experience)
5+ years of experience in cybersecurity operations, security engineering, or industrial network security
Hands-on experience with SIEM (e.g., Rapid7, Microsoft Sentinel) and EDR (e.g., Sophos, Defender for Endpoint)
Experience with vulnerability management tools (e.g., Rapid7)
Working knowledge of firewalls (FortiGate, Palo Alto), IDS/IPS, and network segmentation
Solid understanding of Windows, Linux, and industrial control system architectures
Scripting/automation experience (PowerShell, Python, or Bash) preferred
Familiarity with cloud platforms (Azure, AWS) and secure connectivity in hybrid environments
Experience designing and implementing Zero Trust architecture
Experience hardening servers and network devices
Experience implementing cloud-native security controls (Security Groups, IAM policies, Azure AD Conditional Access)
Required: CompTIA Security+, GICSP, or a GIAC certification (e.g., GCIA, GCIH)
Preferred: CISSP or CISM
Must be available to provide emergency support outside regular business hours when urgent security matters arise.
Strong analytical and troubleshooting skills in complex, networked environments
Excellent communication skills with both technical and non-technical stakeholders
Ability to balance security priorities with operational continuity
Collaborative, proactive problem-solving mindset
Must be legally eligible to work for the Company at all times.
Valid Passport ability to occasionally travel if required to other offices locations in CAD/USA/MEX.