Information Security Advisor conducting cyber - risk assessments and contract reviews for Sun Life, a global financial - services company. Advising business and technology teams on security controls, compliance, and risk remediation.
About the role
- Principal Cloud Security Engineer securing cloud-native infrastructure for Xapo Bank. Responsible for implementing security measures across AWS, GCP, and other environments.
Responsibilities
- Architect, implement, and maintain cloud security controls across AWS and GCP to protect our infrastructure, applications, and data.
- Take full ownership of security projects, driving them from initial concept through development, testing, and deployment.
- Review, write and deploy infrastructure-as-code (IaC) security solutions using Terraform.
- Continuously assess cloud environments using Cloud Security Posture Management (CSPM) platforms like Wiz.
- Support monitoring, detection, and response for cloud threats by integrating with tools such as AWS GuardDuty, Security Hub, and GCP Security Command Center.
- Participate actively in incident response and forensic analysis for cloud-related security events.
- Collaborate with cross-functional teams to perform threat modeling and secure architecture reviews for new services and infrastructure changes.
- Help reinforce a security-first culture by sharing best practices and participating in awareness initiatives.
Requirements
- 5+ years of experience in cloud security engineering, DevSecOps, or related infrastructure security roles. with demonstrable expertise in securing cloud environments (especially AWS and/or GCP).
- Strong hands-on experience with securing AWS and/or GCP environments (IAM, VPCs, workload protection, encryption, etc.).
- Proficiency in Terraform, with a focus on building and enforcing secure cloud infrastructure.
- Solid experience with cloud-native security tools and CSPM solutions like Wiz, Prisma Cloud, or Orca Security.
- Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO) and their practical application in cloud environments.
- Familiarity with container security concepts.
- Solid grasp of DevSecOps principles, with proven experience integrating security into CI/CD pipelines and operational processes.
- Excellent problem-solving abilities, with a proactive mindset and the capability to adapt to new challenges in dynamic environments.
- Relevant certifications are a plus, such as: AWS Certified Solutions Architect, AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Other recognized cloud security certifications.
Benefits
- Shape the Future: Improve lives through cutting-edge technology, work 100% remotely from anywhere in the world.
- Great work-life balance: Build amazing things with a balance of autonomy and collaborative teamwork. Set your own work schedule and make use of a flexible PTO plan when you need to recharge.
- Expect Excellence: Collaborate, learn, and grow with a high-performance team. Learn how you learn best - from books to conferences, you’ll get a yearly budget for your individual learning and development goals.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Enterprise Security Architect securing technology for Vancity, a member - owned Canadian credit union. Designing enterprise application security frameworks, controls, and risk - based cybersecurity solutions.
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
LP
Senior Security Engineer (Global Security)
LinkedIn Recruiter Post
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.