Posting record
Open 13+ days
- Global Experienced Careers' site dates the posting
- Ghostless first sees this listing
- Last checked: still up
How we know
It hasn't been reposted, listed twice, or left up unusually long, and the posting doesn't say it's a talent pool.
Ghostless records the day it first sees a posting, so a repost can't reset its age. This one was already up when Ghostless started tracking Global Experienced Careers, so its true age is longer.
Last checked Nov 4, 2026.
How well do you match?
See how much of this posting your resume shows, and what it's missing.
Upload your resumeWhat it asks of you
- 0–4 years of experience
What the posting discloses
Not stated: Pay, real vacancy, AI screening.
Why these three
Ontario requires postings from employers with 25 or more staff to state the pay, whether the vacancy exists, and whether AI screens applicants.
Some employers add pay only on their own site. Check the original posting before you rule it out.
Skills mentioned
About the role
Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Intern/Trainee
Job Description & Summary
Our Cloud and Infrastructure Security team helps organizations use cloud technology securely while benefiting from the flexibility and speed that cloud platforms provide.
We help clients answer practical questions such as: Is our cloud environment configured securely? Who should have access to sensitive resources? How do we protect data and applications? And how can security be built into cloud environments from the start rather than added afterwards?
As a Graduate/ Associate, you will learn how cloud environments work, support security assessments and help clients identify and address weaknesses across platforms such as Microsoft Azure, AWS, Microsoft 365 and Google Cloud.
Core Activities: "What You'll Be Working On"
- Support cloud security architecture assessments across Azure, AWS and other hyperscalers - document current-state designs, map controls to agreed reference architectures and track architecture improvement actions.
- Assist with deploying and testing Microsoft Defender XDR policies and Microsoft Sentinel analytics rules, workbooks and watchlists.
- Help configure Microsoft Purview DLP policies, sensitivity labels, auto-labelling rules and data classification scans.
- Run vulnerability scans across cloud workloads, containers, servers and network devices, then build prioritised remediation reports for client teams.
- Support identity and access reviews - privileged role usage, stale accounts and excessive permissions in cloud and M365 estates.
- Maintain evidence packs, control-mapping trackers and posture dashboards for recurring client reporting.
- Assist with onboarding new subscriptions, accounts and data sources into posture, logging and DLP tooling.
- Support infrastructure security reviews - OS/server hardening against CIS Benchmarks, firewall rule reviews and network segmentation checks.
Key Skills: "What candidates need to have"
Typically 0–4 years of experience . Previous cloud or cybersecurity experience is helpful, but not required.
- Cloud and infrastructure fundamentals - Azure/AWS core services, TCP/IP networking, firewalls, Windows/Linux and the shared responsibility model.
- Cloud security posture and IAM basics - identity models, roles, policies, least privilege and common misconfiguration patterns.
- Familiarity with Microsoft Defender (for Cloud, Endpoint, Identity, Office 365) and Microsoft Sentinel navigation and reporting.
- Microsoft Purview basics - DLP policies, DSPM, sensitivity labels, data classification and content explorer.
- Working knowledge of CSPM/CNAPP tooling such as Microsoft Defender for Cloud, Wiz or Prisma Cloud.
- Scripting (PowerShell, Python) and KQL fundamentals for querying logs and automating evidence collection.
- Understanding of vulnerability management lifecycle and CVSS-based prioritization.
- Accurate documentation and clear reporting for technical and non-technical client audiences.
- Certifications: AZ-900, SC-900 or AWS Cloud Practitioner; CompTIA Security+ / Network+; CCSK desirable.
Knowledge Exposure: "What you'll build expertise in"
During your first projects, you will learn how organizations secure cloud environments and how security principles translate into practical configurations and controls. You will build exposure to cloud architecture, identity and access, network and infrastructure security, server and endpoint hardening, data protection, security monitoring, DevSecOps and cloud security assessments while developing your technical consulting skills.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required
Degrees/Field of Study preferred
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date
October 19, 2027
Something wrong with this posting?