Senior Cloud Application Security Engineer securing Trulioo’s AWS-hosted SaaS platform. Collaborating with teams to automate security in CI/CD pipelines and safeguard application integrity.
Responsibilities
Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments
Lead and support application security reviews and threat modeling, including code review, static, and dynamic testing
Own and improve vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows
Establish and maintain AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting
Design and implement Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations
Drive automation of security workflows to reduce manual effort and improve response times
Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments
Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation
Track and report on the effectiveness of security controls and continuously improve security posture
Research and evaluate emerging technologies and security trends to improve platform security and operational efficiency
Requirements
Strong experience in cloud security, preferably AWS, with hands-on implementation of security controls and guardrails
Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including designing and implementing controls in production environments
Strong experience implementing security controls within CI/CD pipelines and influencing developer workflows
Experience with vulnerability management across application and infrastructure layers, including prioritization and remediation workflows
Hands-on experience with AWS security services such as SecurityHub, GuardDuty, IAM, Config, Control Tower, CloudWatch, and related tooling
Strong DevSecOps experience with a cloud provider, ideally AWS (bonus points for AWS certifications)
Strong scripting and automation experience (Python, Terraform, or similar), with a focus on reducing manual operational work
Experience with monitoring and logging platforms (e.g., Sumo Logic or equivalent)
Knowledge of security frameworks and standards (e.g., OWASP Top 10, ISO 27001, SOC 2)
Strong technical background in Linux and cloud-based systems
Ability to operate independently and prioritize effectively in a dynamic environment
Strong problem-solving and critical thinking skills, with a focus on practical, scalable solutions
Excellent communication and collaboration skills across engineering and security teams
5+ years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments
Bachelor’s degree in computer science, engineering, or equivalent experience.
Benefits
Comprehensive Benefits: We provide a robust benefits package for full-time, permanent employees, including health, dental, and vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend (equivalent to $1,000 in local currency).
Flexible Hybrid Working Environment: Our offices are designed to support both collaboration and flexibility. Enjoy weekly lunches, quality coffee, and regular social events. Many locations also feature parent rooms, on-site gyms, comfortable lounges, and adaptable workstations to support your comfort and productivity.
Wellness: We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized.
Employee Resource Groups: Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies.
Senior Application Support Engineer supporting Smile Digital Health’s FHIR - based healthcare data platform. Troubleshooting Java applications, delivering enhancements, and handling Tier 2 production incidents for clients.
Applications Engineer developing motor, VFD, and drive - system quotations for Innomotics, a motors and drives supplier. Supporting mining and heavy - industry projects across Canada.
Applications Engineer designing membrane filtration upgrades for Trojan Technologies, a water treatment solutions company. Developing technical proposals and customer solutions for municipal and industrial projects.
Senior Software Applications Engineer developing subscription commerce systems for Calix’s cloud - first broadband platform. Building configurators, order processing, billing, entitlements, and customer subscription workflows.
Senior Application Engineer developing and maintaining features on the Salesforce Core Platform. Collaborating with software engineers to enhance Guest Services experience and drive business outcomes.
Application Support Engineer resolving technical issues for a fintech software provider. Collaborating across teams to ensure high - level client support and improve platform development.
Lead overseeing pre - sales performance and team success in energy storage for Socomec. Prepare proposals, collaborate with teams, and drive business success.