Senior Cloud Security Engineer - Red/Purple Team Expert

RBC; Montreal (administrative region); Hybrid; CAD 95,000 - 130,000; Full time

Benefits offered by this job

Total Rewards Program (bonuses, stock)

Annual training budget

Hybrid-remote flexibility

Career development opportunities

Job summary

RBC is seeking a cybersecurity professional to join the Cloud Security team in Canada. You will assess and improve security for public cloud environments (AWS, Azure, GCP), participate in Red and Purple Team exercises, and help evolve offensive tooling.

You will collaborate with Cloud Security, Threat Hunting, SOC/IR, and analytics teams to drive pragmatic security improvements, while communicating complex concepts to non-technical stakeholders.

Qualifications

• Experience scripting/automating operations via cloud APIs or CLIs.
• Understanding of cloud-centric architectures and DevOps.
• Experience managing cloud platforms (AWS/Azure/GCP).
• Experience building systems on AWS/Azure/GCP.
• Experience with orchestration and configuration management (Ansible/Puppet).
• Experience with IaC (CloudFormation/Terraform) and CI/CD tools (Jenkins).
• Background in PaaS/SaaS practices (SLAs, HA, patching, networking).
• Strong technical understanding of Linux and Windows.
• Ability to explain complex security concepts to non-technical audiences.

Responsibilities

• Assess and improve security of public cloud environments (AWS, Azure, GCP).
• Participate in Red and Purple Team exercises in mature production environments.
• Help develop offensive tradecraft and tooling.
• Collaborate with defensive teams to drive security improvements.
• Communicate security events and trends to stakeholders.

Skills

Cloud scripting

Cloud APIs/CLIs

DevOps principles

Cloud platforms (AWS/Azure/GCP)

IaC (CloudFormation/Terraform)

CI/CD (Jenkins)

PaaS/SaaS practices

Linux/Windows

Plain-language communication

Tools

Ansible

Puppet

Job description

RBC is seeking a cybersecurity professional to join the Cloud Security team in Canada. You will assess and improve security for public cloud environments (AWS, Azure, GCP), participate in Red and Purple Team exercises, and help evolve offensive tooling.

You will collaborate with Cloud Security, Threat Hunting, SOC/IR, and analytics teams to drive pragmatic security improvements, while communicating complex concepts to non-technical stakeholders.