Senior Cloud Application Security Engineer securing Trulioo’s AWS-hosted SaaS platform. Collaborating with teams to automate security in CI/CD pipelines and safeguard application integrity.
Responsibilities
Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments
Lead and support application security reviews and threat modeling, including code review, static, and dynamic testing
Own and improve vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows
Establish and maintain AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting
Design and implement Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations
Drive automation of security workflows to reduce manual effort and improve response times
Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments
Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation
Track and report on the effectiveness of security controls and continuously improve security posture
Research and evaluate emerging technologies and security trends to improve platform security and operational efficiency
Requirements
Strong experience in cloud security, preferably AWS, with hands-on implementation of security controls and guardrails
Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including designing and implementing controls in production environments
Strong experience implementing security controls within CI/CD pipelines and influencing developer workflows
Experience with vulnerability management across application and infrastructure layers, including prioritization and remediation workflows
Hands-on experience with AWS security services such as SecurityHub, GuardDuty, IAM, Config, Control Tower, CloudWatch, and related tooling
Strong DevSecOps experience with a cloud provider, ideally AWS (bonus points for AWS certifications)
Strong scripting and automation experience (Python, Terraform, or similar), with a focus on reducing manual operational work
Experience with monitoring and logging platforms (e.g., Sumo Logic or equivalent)
Knowledge of security frameworks and standards (e.g., OWASP Top 10, ISO 27001, SOC 2)
Strong technical background in Linux and cloud-based systems
Ability to operate independently and prioritize effectively in a dynamic environment
Strong problem-solving and critical thinking skills, with a focus on practical, scalable solutions
Excellent communication and collaboration skills across engineering and security teams
5+ years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments
Bachelor’s degree in computer science, engineering, or equivalent experience.
Benefits
Comprehensive Benefits: We provide a robust benefits package for full-time, permanent employees, including health, dental, and vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend (equivalent to $1,000 in local currency).
Flexible Hybrid Working Environment: Our offices are designed to support both collaboration and flexibility. Enjoy weekly lunches, quality coffee, and regular social events. Many locations also feature parent rooms, on-site gyms, comfortable lounges, and adaptable workstations to support your comfort and productivity.
Wellness: We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized.
Employee Resource Groups: Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies.
Vehicle Applications Engineer responsible for supporting production contracts and bids for heavy - duty transit buses. Collaborating with teams to manage technical requirements and mitigate risks in production contracts.
Application Engineer analyzing customer specifications and selecting appropriate G&W products. Collaborating with engineering team to develop custom solutions for technical requirements.
Application Support Engineer managing infrastructure solutions to ensure reliability and scalability of critical systems at Ciena. Responsibilities include incident management, performance monitoring, and automation of tasks.
Applications Engineer at Xylem leading technical activities for FlexNet systems. Collaborating with teams to enhance water technology solutions for critical challenges in the industry.
Senior Mobile Application Engineer responsible for designing and developing scalable mobile applications for Clario's core mobile platform. Collaborating with cross - functional teams to enhance clinical trial experiences.
Lead Mobile Application Engineer overseeing design and development of Clario's mobile platform. Drive migration of Xamarin.Forms applications to .NET MAUI while mentoring a team of engineers.
Applications Engineer assisting clients with SOLIDWORKS solutions in a hybrid role at GoEngineer. Collaborating, mentoring, and delivering technical support and content creation.
Sales Application Engineer supporting commercial growth by acting as a technical bridge in energy solutions. Supporting complex commercial energy storage opportunities during the pre - sales lifecycle.
Applications Engineer responsible for automation technologies in a global energy innovation company like SLB. Supporting design, implementation, and troubleshooting of technology products.
Application Security Engineer at Jane focusing on security operations management using AI and automation. Collaborating with engineering and cloud teams for effective incident response and alert triage.