AWS Security Specialist

Jobgether; Canada; Remote; CAD 62,000 - 94,000; Full time

Benefits offered by this job

Fully remote work, international teams

Job summary

Jobgether seeks an experienced AWS Security Specialist based in Canada for a fully remote role. You will own security architecture across AWS, focusing on containerized workloads and data protection, while translating compliance requirements into automated controls.

The role blends hands-on implementation with threat modeling, monitoring, and incident response, working with DevOps and security teams globally. Mandarin skills are essential for collaboration.

Qualifications

• 3–5+ years of hands-on AWS security experience.
• Deep knowledge of Kubernetes security and EKS operations.
• Proficient in threat modeling and secure architecture reviews.
• Ability to translate compliance requirements into automated controls.

Responsibilities

• Design defense-in-depth security across AWS environments.
• Harden VPC, control access, and secure connectivity (Transit Gateway, VPN).
• Own IAM, encryption, and least-privilege controls.
• Secure EKS, including IRSA and network policies.
• Develop container image scanning and security workflows.
• Build real-time monitoring with CloudWatch, CloudTrail, GuardDuty, Security Hub.
• Lead incident response and remediation efforts.
• Collaborate with operations and enterprise security teams.

Skills

Cloud security mindset

Cross-functional collaboration

Threat modeling

Automation mindset

Tools

AWS

Kubernetes / EKS

VPC / NACLs / IAM

Terraform / CloudFormation

CloudWatch / CloudTrail / GuardDuty / Security Hub

CI/CD security integrations (Snyk / Prisma Cloud / Trivy)

Terraform / AWS CDK

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for anAWS Security Specialist based in Canada.

This is an opportunity for an experienced cloud security professional to strengthen and evolve the security infrastructure of a global, fully remote technology environment. You will take ownership of AWS security architecture, helping protect critical cloud services, containerized workloads, and sensitive data. Working closely with operations, DevOps, and enterprise security teams, you will translate compliance requirements into practical, automated security controls. The role combines hands-on technical implementation with threat modeling, monitoring, and incident response. You will help embed security into infrastructure and development processes while supporting a rapidly expanding organization. Mandarin communication skills are essential for effective collaboration across the distributed team.

Accountabilities:

• Design and implement defense-in-depth security architecture across AWS environments.
• Strengthen VPC network security through Security Groups, Network Access Control Lists (NACLs), PrivateLink, and secure connectivity configurations.
• Implement and maintain least-privilege IAM controls and data encryption strategies.
• Own the security of Amazon EKS environments, including infrastructure hardening, Kubernetes Network Policies, and IAM Roles for Service Accounts (IRSA).
• Establish and maintain container image scanning workflows and improve container security practices.
• Build real-time security monitoring, logging, and alerting systems using CloudWatch, CloudTrail, GuardDuty, and Security Hub.
• Participate in security incident response, investigate potential threats, and coordinate remediation activities.
• Serve as the technical point of contact between operations teams and the central enterprise security function.
• Translate security policies, ISO 27001 and SOC 2 requirements, and internal audit findings into actionable technical architecture and engineering controls.
• Conduct threat modeling, identify architectural vulnerabilities, and drive security remediation across teams.
• Champion Security as Code practices by automating infrastructure compliance, auditing, and remediation through Terraform or CloudFormation.

Requirements:

• 3–5+ years of hands-on AWS experience, with a strong understanding of the AWS Shared Responsibility Model.
• Advanced knowledge of Kubernetes and Amazon EKS security operations, including storage security, runtime protection, and container network isolation.
• Deep understanding of AWS VPC architecture, including hybrid cloud connectivity through Transit Gateway and VPN, as well as CDN and WAF deployment.
• Proficiency with CloudWatch for log analysis, metrics monitoring, and automated alerting.
• Strong scripting skills in at least one of Python, Go, or Bash, with the ability to develop automation scripts for security and operations tasks.
• Experience working with security, compliance, or audit teams, and the ability to translate regulatory and compliance requirements into engineering solutions.
• Ability to independently perform threat modeling and identify security risks in system architecture.
• Strong technical documentation, problem-solving, and cross-functional communication skills.
• Mandarin communication ability for daily collaboration and meetings, along with English reading and writing proficiency.

Nice to have:

• AWS Certified Security – Specialty certification.
• Certified Kubernetes Security Specialist (CKS) certification.
• DevSecOps implementation experience, including integrating security tools into CI/CD pipelines, such as Snyk, Prisma Cloud, or Trivy.
• Experience with Infrastructure as Code tools such as Terraform or AWS CDK.
• Previous experience in cryptocurrency exchanges, Web3, or related industries.
• An operations or DevOps engineering background, particularly experience transitioning from infrastructure or operations into cloud security.

Benefits:

• Monthly compensation of USD 4,000–6,000, paid over 13 months.
• Additional performance-based bonus.
• Permanent, full-time employment.
• Fully remote working arrangement, with no specific time-zone restriction.
• Opportunity to contribute to the security infrastructure of a global organization operating across multiple regions.