Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
About the role
- Cloud Security Engineer at Fullscript, securing cloud platforms across AWS and Google Cloud for healthcare. Building security controls and implementing best practices for sensitive data protection.
Responsibilities
- Design and implement cloud security controls across AWS and Google Cloud, including multi-account architecture, network segmentation, data protection, and secure-by-default infrastructure patterns.
- Build reusable Terraform modules, reference architectures, policy-as-code guardrails, and self-service tooling that make secure implementation easier for engineering teams.
- Operate and tune CSPM/CNAPP tooling to identify misconfigurations, exposures, toxic combinations, and coverage gaps across Fullscript’s cloud environments.
- Drive remediation of cloud vulnerabilities and misconfigurations, balancing risk, engineering effort, customer impact, and business priorities.
- Strengthen IAM, secrets management, key rotation, cloud credentials, machine identities, and just-in-time access patterns across cloud and SaaS environments.
- Embed security into CI/CD pipelines through IaC scanning, container image scanning, SBOM generation, artifact protection, and software supply chain controls.
- Partner with the SOC and engineering teams on cloud-native detections, logging, runbooks, incident response, post-incident learning, and secure AI/ML workload patterns.
Requirements
- 4+ years of security engineering experience, including 2+ years focused on cloud security in AWS and/or Google Cloud.
- Strong understanding of cloud-native attack paths, IAM risks, network controls, data protection, key management, secrets management, and workload identity.
- Hands-on experience with infrastructure-as-code, ideally Terraform, and a strong understanding of how to secure it at scale.
- Ability to write code in Python, Go, or a similar language to automate detection, remediation, and security workflows.
- Experience integrating security tooling into CI/CD pipelines and developer workflows without creating unnecessary friction.
- Working knowledge of at least one compliance framework such as SOC 2, HIPAA, HITRUST, PCI-DSS, or ISO 27001, with the ability to translate requirements into technical controls.
- Strong communication and collaboration skills, with a bias toward enabling teams, influencing without authority, and helping engineers build securely.
- Bonus if you have
- Experience in healthcare, fintech, or another regulated environment.
- Hands-on experience with CSPM or CNAPP tools such as Wiz, Prisma Cloud, Lacework, or similar platforms.
- Experience securing Ruby on Rails, JavaScript, TypeScript, GraphQL, containerized workloads, or modern cloud-native applications.
- Cloud incident response, forensics, or threat hunting experience.
- Experience securing AI/ML workloads, LLM integrations, data science platforms, autonomous AI systems, or non-human identities.
- Familiarity with AI/ML model supply chain risks, AI-specific SBOMs, or controls for limiting blast radius and privilege escalation.
- Open-source contributions or experience building internal security tooling.
Benefits
- Remote-first flexibility to work where you work best, with Ottawa, Toronto, Calgary, or Vancouver preferred for this role.
- Flexible PTO and competitive pay, because work-life balance matters
- RRSP/401k match and stock options to invest in your future
- Premium benefits package with customizable coverage, paramedical services, and an HSA.
- Fullscript discounts to save on high-quality wellness products
- Continuous learning opportunities to grow your skills and career
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
LP
Senior Security Engineer (Global Security)
LinkedIn Recruiter Post
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.
Senior security advisor simulating and mitigating cyberthreats for Desjardins, North America's largest cooperative financial group. Leading offensive security methodologies, tools and strategic initiatives.
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy - now - pay - later platform. Designing secure, scalable CIAM backend systems and integrations.
Senior Cyber Security Specialist delivering secure architectures, audits, and cyber risk services. Supporting BMT’s engineering mission for safer, more sustainable solutions.