Senior Cloud Security Engineer — Secure SaaS Growth

Forma AI Inc.; Toronto; On-site; CAD 160,000 - 190,000; Full time

Benefits offered by this job

Stock options (employee equity)

Healthcare coverage

$750 yearly training stipend

Career growth opportunities

Job summary

Forma.ai, a Toronto-based Series B startup, is seeking a Senior Security Engineer to lead hands-on security across the application, cloud infrastructure, development lifecycle, and incident-response practices.

You'll collaborate with Engineering, DevOps, IT, Product, Legal, and Privacy to identify risks, design controls, automate security processes, and help teams ship secure software. This role offers growth as IC or into a security team.

Qualifications

• Six+ years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
• Strong hands-on experience securing cloud environments, including IAM, networking, encryption, logging, and secrets management.
• Experience with threat modelling, incident response, and security automation.
• Ability to write scripts using Python, Bash, PowerShell, or similar languages.
• Strong communication, troubleshooting, and cross-functional collaboration skills.

Responsibilities

• Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries.
• Embed security requirements into Terraform and other Infrastructure as Code, and improve secrets, certificate, encryption-key, and credential management.
• Build automated checks for insecure configurations, excessive permissions, exposed resources, and configuration drift across Kubernetes, containers, serverless workloads, networking, and data services.
• Run threat modelling and security architecture reviews for new products, services, APIs, data pipelines, and third-party integrations.
• Strengthen tenant isolation, authorization enforcement, and fine-grained data access controls at the schema, table, row, and column level.
• Help protect sensitive data across databases, data warehouses, S3, analytics services, and internal tools, including logging and auditability for sensitive-data access.
• Review AI and agentic workflows for data leakage, prompt injection, insecure tool use, and excessive permissions; define secure patterns for approved services such as Amazon Bedrock.
• Identify and remediate application vulnerabilities, and build tooling and reusable libraries to make secure paths easy for engineers.

Skills

Security engineering

Cloud security

Application security

DevSecOps

Infrastructure engineering

Tools

Terraform

Kubernetes

CI/CD tooling

Job description

Forma.ai, a Toronto-based Series B startup, is seeking a Senior Security Engineer to lead hands-on security across the application, cloud infrastructure, development lifecycle, and incident-response practices.

You'll collaborate with Engineering, DevOps, IT, Product, Legal, and Privacy to identify risks, design controls, automate security processes, and help teams ship secure software. This role offers growth as IC or into a security team.