Cybersecurity Engineer at Buckland Customs Brokers in CA

Buckland is looking for a Cybersecurity Engineer

What you’ll be doing We are seeking a proactive Cybersecurity Engineer to design, build, and maintain the security posture of our IT environments. This is not a purely reactive monitoring role, we’re looking for professionals who identifies risk before it becomes an incident, strengthens our systems continuously, and leads response efforts when issues do arise. You'll operate at the intersection of security operations, IT, and governance, monitoring and responding to threats, while also architecting the tools, controls, and processes that prevent them in the first place. The Engineer will monitor, design, and optimize security measures, troubleshoot issues, and implement best practices to strengthen the company’s digital footprint. What we can offer you

Competitive, salary, benefits package, and matching retirement plan. Compensation range: $90,000–115,000 annually (subject to experience)] A friendly, collaborative work environment. Opportunities for professional development & ongoing learning. A chance to be part of a growing organization. Remote work arrangement is available for applicants who are not local to a Buckland office.

You will be responsible for

Security Operations & Incident Response: Monitor security alerts and incidents across IT using SIEM and EDR tools Perform triage, investigation, and escalation of detected security events Lead incident response activities; containment, eradication, and recovery Conduct root cause analysis following incidents and drive corrective actions Maintain clear, thorough documentation of incidents, findings, and remediation steps Security Engineering & Tool Management: Deploy, configure, and maintain security technologies: firewalls, endpoint protection, network segmentation, and vulnerability scanners Tune detection and automation rules within SIEM/SOAR platforms to improve visibility and response times Partner with IT and business units to balance operational uptime with security best practices Governance, Risk & Compliance: Lead and support implementation of cybersecurity standards, including ISO 27001 Lead ISO 27001 audits, compliance reporting, and control testing Contribute to development and enforcement of security policies, procedures Maintain the risk register, perform risk assessments, and track mitigation progress Design and implement Zero Trust principles across network and cloud systems Awareness & Culture Support rollout of company-wide information security strategy Deliver and coordinate security awareness and training initiatives Promote a security-conscious culture across IT, Warehouse, and Business Teams Collaboration & Reporting Work cross-functionally with infrastructure, cloud, and application teams to embed security into operational workflows Prepare dashboards, reports, and metrics on security operations and tool performance Third-Party & Vendor Security Support vendor security assessments and Onboarding/Offboarding Ensure security requirements are understood and met in supplier engagements Monitor third-party compliance and risk mitigation activities Continuous Improvement Evaluate emerging security technologies and methodologies Recommend and deploy new tools to strengthen the overall cybersecurity program

What we need from you

Bachelor’s degree in information security, Computer Science, Engineering, or related field (or equivalent practical experience) 5+ years of experience in cybersecurity operations, security engineering, or industrial network security Hands-on experience with SIEM (e.g., Rapid7, Microsoft Sentinel) and EDR (e.g., Sophos, Defender for Endpoint) Experience with vulnerability management tools (e.g., Rapid7) Working knowledge of firewalls (FortiGate, Palo Alto), IDS/IPS, and network segmentation Solid understanding of Windows, Linux, and industrial control system architectures Scripting/automation experience (PowerShell, Python, or Bash) preferred Familiarity with cloud platforms (Azure, AWS) and secure connectivity in hybrid environments Experience designing and implementing Zero Trust architecture Experience hardening servers and network devices Experience implementing cloud-native security controls (Security Groups, IAM policies, Azure AD Conditional Access) Required: CompTIA Security+, GICSP, or a GIAC certification (e.g., GCIA, GCIH) Preferred: CISSP or CISM Must be available to provide emergency support outside regular business hours when urgent security matters arise. Strong analytical and troubleshooting skills in complex, networked environments Excellent communication skills with both technical and non-technical stakeholders Ability to balance security priorities with operational continuity Collaborative, proactive problem-solving mindset Must be legally eligible to work for the Company at all times. Valid Passport ability to occasionally travel if required to other offices locations in CAD/USA/MEX.