Senior Infrastructure Security Engineer, Clio

• This role is for someone passionate about building proactive security solutions, implementing detection capabilities, and driving security automation at scale
• Are you someone who’s always probing and asking why, someone who enjoys finding smarter and more efficient solutions to problems
• If so, we have a spot for you on Clio’s security team
• We are looking for the right candidate to develop and run our security architecture and engineering program, and be an advocate and advisor for security overall
• If you have a strong operations background with a passion for security and experience in cloud-first environments, then we want to talk to you
• Cloud Security expertise with 3+ years in securing AWS environments
• Hands-on expertise with Kubernetes and/or EKS, including autoscaling, CI/CD, and automation
• Adept at using IaC technologies like Terraform, Puppet, CloudFormation, or Ansible
• Skilled in securing cloud infrastructure such as AWS, GCP/GSuite, GitHub, and IdP
• Familiarity in a cloud-first organization, including experience with AWS and/or GCP
• Ability to program in a dynamic programming language: Python, Ruby
• Strong understanding of threat vectors, indicators of compromise, malicious behaviour identification, and emerging threat analysis
• Strong Linux experience
• Demonstrate a keen interest in improving your craft by using AI

Desirable

• We are currently seeking a Senior Infrastructure Security Engineer to join our rapidly growing Security team
• You will be exposed to new challenges and technologies while making a tangible impact
• Implement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security, EC2 hardening, and cloud-native protection
• Partner with the cloud security manager to plan and develop the team’s road map
• Develop and tune rules for cloud-specific threats, manage GuardDuty/Defender integration, and build automated response workflows
• Investigate potential security incidents and serve as initial incident responder
• Provide architectural guidance for securing our user environments and maintaining a good security posture
• Secure Kubernetes workloads, implement pod security standards, and integrate security scanning into CI/CD pipelines
• Stay up-to-date with current methods of cloud compromise, tools, tactics, and procedures
• Work in a small team where you can make a big impact