Senior Infrastructure Security Engineer, Clio

• If you have a strong operations background with a passion for security and experience in cloud-first environments, then we want to talk to you
• Thrive working in a small team where you can make a big impact
• Passionate about cloud-native security and container orchestration platforms
• Continually seek for better more efficient ways of working
• Excel at building security automation and detection capabilities
• Enjoy the hustle of working in a fast growing successful organization
• Cloud Security expertise with 3+ years in securing AWS environments
• Hands-on expertise with Kubernetes and/or EKS, including autoscaling, CI/CD, and automation
• Skilled in securing cloud infrastructure such as AWS, GCP/GSuite, GitHub, and IdP
• Familiarity in a cloud-first organization, including experience with AWS and/or GCP
• Adept at using IaC technologies like Terraform, Puppet, CloudFormation, or Ansible
• Ability to program in a dynamic programming language: python, ruby
• Strong understanding of threat vectors, indicators of compromise, malicious behaviour identification, and emerging threat analysis
• Strong Linux experience

Desirable

• We are currently seeking a Senior Infrastructure Security Engineer to join our rapidly growing Security team
• This role is for someone passionate about building proactive security solutions, implementing detection capabilities, and driving security automation at scale
• You will be exposed to new challenges and technologies while making a tangible impact
• If you are local to one of our hubs (Burnaby, Calgary, or Toronto) you will be expected to be in office minimum two days per week for our Anchor Days
• We are looking for the right candidate to develop and run our security architecture and engineering program, and be an advocate and advisor for security overall
• Implement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security, EC2 hardening, and cloud-native protection
• Partner with the cloud security manager to plan and develop the team’s road map
• Develop and tune rules for cloud-specific threats, manage GuardDuty/Defender integration, and build automated response workflows
• Investigate potential security incidents and serve as initial incident responder
• Stay up-to-date with current methods of cloud compromise, tools, tactics, and procedures
• Provide architectural guidance for securing our user environments and maintaining a good security posture
• Secure Kubernetes workloads, implement pod security standards, and integrate security scanning into CI/CD pipelines