Job Title: Security Engineer
Contract Duration: 6 months to start (extendable)
Location: Winnipeg (Remote)

Our client is seeking a highly skilled Cyber Security Engineer to join their team to lead the security strategy, hardening, and compliance of their product ecosystem. The primary focus is to implement defined cyber security protections (e.g., password rules and hardening of both Windows and Linux Ubuntu) and recommending additional mitigations to ensure safe device operation in a medical environment. The ideal candidate will possess a deep cybersecurity background and establishing certifiable security frameworks.

Responsibilities

• OS Hardening: Define, implement, and maintain security hardening policies for Windows 10 LTSC and Ubuntu Desktop (including versions with real-time options).
• Access & Authentication Strategy: Design and enforce comprehensive security strategies for password protection, login management, role-based access control (RBAC), and user authentication.
• Vulnerability & Risk Mitigation: Identify security vulnerabilities within the OS layer, develop mitigation strategies.
• Security Scripting: Write and maintain security automation scripts (PowerShell, Bash, Python) to audit system configurations and enforce compliance baselines.
• Cross-functional Collaboration: Collaborate with development, QA, and product teams to translate medical device/healthcare functional requirements into secure system architectures.

Qualifications

• 10+ years of experience as a Cyber Security Engineer, Systems Security Engineer, or a similar security-focused role.
• Proven experience hardening operating systems, specifically Windows 10 LTSC and Ubuntu Desktop.
• Strong understanding of FDA (or relatable) guidelines regarding cybersecurity for medical devices/healthcare software, including password and access management requirements.
• Hands-on experience certifying products to security frameworks such as NIST, HITECH, SOC2, or similar standards.
• Demonstrated experience implementing data encryption solutions (AES-256, RSA, or similar)
• Strong hands-on experience with Windows Group Policy, Windows Security, and Windows Defender Firewall
• Proficiency in scripting languages (PowerShell, Bash, Python) to automate security checks and configuration deployments.
• Excellent problem-solving, communication, and collaboration skills.