Doane Grant Thornton LLP

About the Company

In Canada. For Canada. Doane Grant Thornton LLP is a leading Canadian accounting and advisory firm dedicated to helping our clients, colleagues, and communities thrive. We help dynamic private and public organizations unlock their business potential by providing meaningful, strategic advice across a broad range of services, including assurance, advisory, and tax. For 85 years, we've worked alongside the businesses that have shaped our country and economy--from small businesses to industry leaders. With nearly 3,000 colleagues in 70 offices from St. John's to Victoria, we're deeply connected to the people, industries, and communities that make Canada thrive. Our unique, purpose-driven culture has resulted in consistent recognition as one of Canada's Best Workplaces by the Great Place to Work(r) Institute since 2008. As bold leaders in our chosen markets and within the professional services industry, we're committed to our values of collaboration, leadership, excellence, agility, respect, and responsibility. Doane Grant Thornton LLP is a Canadian member of Grant Thornton International Ltd., whose member firms operate in over 100 countries worldwide.

Listed Jobs

Company Name

Doane Grant Thornton LLP

Job Title

Cloud Security Engineer

Job Description

Job Title: Cloud Security Engineer Role Summary: Advise on cloud security integration across DevOps workflows, ensuring security alignment throughout application development and infrastructure design. Serve as a bridge between security teams and engineering, automating controls, monitoring risks, and mitigating threats in cloud environments. Expactations: - Collaborate on DevSecOps practices within CI/CD pipelines. - Secure infrastructure-as-code templates and enforce policy-as-code. - Automate vulnerability scanning and incident response. - Conduct risk assessments for applications, suppliers, and processes. Key Responsibilities: - Design and implement cloud security controls for Azure and SaaS platforms. - Perform threat risk assessments and produce documentation for initiatives. - Monitor systems for threats, manage automated security tools, and remediate incidents. - Develop scripts for security automation and improve system resilience (uptime, disaster recovery). - Advise teams on secure coding and conduct training/security awareness programs. Required Skills: - Proficiency in DevSecOps, CI/CD tools (GitHub Actions, Jenkins). - Experience with infrastructure-as-code (IaC) and policy enforcement (OPA, Sentinel). - Strong scripting/automation skills (Python, PowerShell, Bash). - Familiarity with cloud security frameworks (Azure, AWS, M365). - Knowledge of vulnerability management tools (Snyk, Veracode) and SIEM solutions. - Threat detection, incident response, and log analysis capabilities. Required Education & Certifications: - Bachelor’s degree in Computer Science, Cybersecurity, or related field. - 3+ years of cloud security or DevSecOps experience. - Certifications (e.g., CISSP, CISM, or CCSK) preferred. - Ongoing knowledge of emerging cloud security trends and technologies.

Toronto, Canada

On site

28-09-2025