Infrastructure Security Engineer ensuring security for Yelp’s AWS and Google Cloud environments. Collaborating with security engineers to enhance cloud and corporate security posture.
Responsibilities
Design, implement, operationalize and maintain systems that ensure the security of Yelp’s AWS and Google Cloud Platform (GCP) environments, focusing on least privilege, containerization, and developer efficiency
Develop and enforce data security controls to support privacy initiatives, including data mapping and data retention
Manage system-level access controls (such as Linux, Docker, Kubernetes), and tiered access for internal digital assets, balancing strict authentication/authorization with usability
Create, extend, and monitor company-wide security standards, proactively identifying and correcting insecure usage across Yelp
Develop and operationalize telemetry, reporting, and alerting systems to collect and analyze security-related data
Conduct timely vulnerability identification, assessment, and remediation across Yelp’s infrastructure, applications, and services
Participate in a robust on-call rotation, respond to security incidents, and contribute to proactive threat modeling and system reviews
Mentor other engineers passing on your skills, and serve as a resource in our #security Slack channel by promoting best practices and offering your expertise across the organization.
Requirements
Experience building secure, scalable, and distributed cloud environments (preferably on AWS and GCP)
Familiarity with modern access controls and authentication mechanisms (Linux, Docker, Kubernetes, IAM, etc.)
Proficient in at least one programming language (e.g., Python, Java, JavaScript, C) and in designing well-structured APIs
Passion for automation to streamline security policy enforcement, detection, and response
Strong analytical skills and a proactive approach to vulnerability assessment and threat modeling
Effective communicator, able to collaborate across diverse teams and provide security guidance in a constructive, approachable manner
Committed to continuous learning, knowledge sharing, and staying current with evolving security trends.
Cybersecurity Administrator providing operational support for compliance activities in information security. Assisting vendor risk management, audit coordination, and vulnerability tracking.
Sr. Manager leading cloud security, compliance, and governance at Metergy Solutions Inc. Drive regulatory adherence and risk mitigation across diverse cloud environments with a focus on security by design.
Security Advisor responsible for designing telecommunications network architectures at Alithya. Ensuring all components meet functional and non - functional requirements while adapting to new trends in the field.
Technical Lead in Cybersecurity Engineering at Morgan Stanley driving security initiatives. Collaborate with tech leaders to ensure enterprise - wide cybersecurity effectiveness and compliance in Montreal.
Cyber Security Intern supporting the operation of Capital Power’s cyber security infrastructure. Engaging in daily operational tasks, security reviews, and incident investigations.
Financial Security Advisor selling life and health insurance products and developing client relationships. Analyzing needs and recommending personalized financial solutions in a hybrid work setup.
Director of Identity Data & Workflow Engineering leading IAM engineering strategy and delivery. Overseeing identity data services, workflow automation, and APIs for the enterprise.
Data Center Security Officer conducting patrols and monitoring alarm systems in a data center. Ensuring safety and security for clients in various shifts and environments.
Security Software Engineer on Evisort Security team at Workday. Designing security products and managing vulnerability lifecycles through the software development process.
Lead and mentor a team of ethical hackers at Packetlabs, managing client penetration tests and fostering professional growth. Drive innovation in cybersecurity practices while ensuring project success and team development.