Senior Cloud Security Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Take charge of cloud security posture management across configurations, workloads, and entitlements for AWS and Azure.

• Execute identity and access management, ensuring least privilege, federation, SSO, secrets management, privileged access, and controls for both workload and non-human identities.

• Develop network segmentation, implement zero-trust access, firewalls, web application firewalls, and oversee traffic inspection in cloud and hybrid networks.

• Enforce container security, manage encryption and key management, and establish policy-as-code guardrails.

• Integrate application security early in the CI/CD process through static, dynamic, dependency, and software supply-chain scanning.

• Conduct threat modeling and secure-by-design evaluations.

• Oversee data classification, encryption, tokenization, key management, data loss prevention, and privacy-by-design strategies for PHI and ePHI.

• Create guardrails for AI, machine learning, and generative AI, focusing on data protection, abuse and misuse controls, and monitoring.

• Optimize SIEM and cloud-native detections, enhance event correlation, and lead incident response efforts.

• Manage vulnerability scanning, coordinate penetration testing, and facilitate remediation of findings.

• Ensure maintenance of security baselines, configuration compliance, controls, logging, and audit evidence.

• Mentor engineers across teams to embed secure practices as the default approach.

• Perform additional duties as assigned.

⛳️ Requirements

• Bachelor’s degree in Computer Science or a related field.

• 6 to 9 years of security engineering experience is recommended but not mandatory.

• Practical experience with cloud technologies.

• Proficiency in utilizing agentic AI tools as a primary means for security engineering, analysis, detection, and automation.

• Senior-level knowledge across network security, application security, cloud security, information security, and AI security, with in-depth expertise in several areas.

• Experience in developing and managing controls as code, policy as code, infrastructure as code, automation, and detections in live environments.

• History of handling on-call duties and incident management.

• Expertise in cloud security within AWS and Azure, covering IAM, least privilege, federation, SSO, secrets management, privileged access, workload and non-human identities, network security, container security, key management, encryption, CSPM, CWPP, and CIEM.

• Background in data protection and privacy engineering, including data classification, encryption, tokenization, key management, DLP, privacy by design, regulated health data, and data residency.

• Knowledge in application and product security, including SSDLC, threat modeling, static and dynamic analysis, software composition analysis, secrets and software supply chain security, and API security.

• Expertise in detection, response, and vulnerability management, including SIEM, cloud-native detection, log and event correlation, vulnerability scanning and management, penetration testing, and remediation.

• Awareness of AI security issues such as prompt injection, data and model poisoning, and data leakage.

• Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS is advantageous.

• Experience with compliance frameworks such as HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR.

• Self-motivated individual capable of multitasking and working independently.

• Exceptional organizational and project management capabilities.

• Strong interpersonal and communication skills.

• Reliable high-speed internet and a workspace free from distractions.

• Ability to be on camera during work-related trainings, meetings, and/or events.

• Capacity to sit or stand at a desk for extended periods while using a computer.

🏝️ Benefits

• Paid Time Off (PTO).

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401(k) with matching contributions.

• Comprehensive Employee Assistance Program (EAP).

• Wellness program.

• Full benefits package.