Senior Infrastructure Security Engineer

P2P; Canada; On-site; CAD 186,000; Full time

Job summary

An innovative firm is looking for a Senior Security Engineer to join its Cloud Security team. This role involves building robust security controls and advising engineering teams on secure architecture. You will leverage your deep expertise in cloud security, particularly with AWS and GCP, to develop threat models and implement security best practices. The position offers a unique opportunity to contribute to a forward-thinking company dedicated to creating an open financial system. If you're passionate about security and want to make a significant impact, this role is perfect for you.

Qualifications

• 5+ years of experience in cloud security with AWS or GCP expertise.
• Ability to deploy cloud infrastructure using Terraform.

Responsibilities

• Develop threat models for cloud platforms to identify security risks.
• Build guardrails to secure cloud platforms by default.

Skills

Cloud Security Expertise

AWS

GCP

Terraform

Golang

Ruby

Kubernetes Security

Tools

Open Policy Agent (OPA)

Wiz

AWS Config

GCP Security Health Analytics

Job description

Job Opportunity: Senior Security Engineer at Coinbase Cloud Security (CloudSec)

Coinbase Cloud Security (CloudSec) is seeking a senior security engineer to build security controls and advise engineering teams on secure architecture requirements and best practices. CloudSec is responsible for the safety of cloud and compute platforms on which Coinbase applications are built. As an engineer on the CloudSec team, you will be a trusted expert on the security of these platforms, ensuring their security through consultations, configuration reviews, policy-as-code, and automation.

Responsibilities:

1. Develop threat models for cloud and compute platforms to identify security risks.
2. Apply your expertise in security best practices for AWS, GCP, and Kubernetes to inform remediations and control roadmaps.
3. Review configuration changes and write policies to detect security invariants.
4. Build guardrails to make cloud and compute platforms secure by default.
5. Write automation code supporting security requirements like threat detection, incident containment, and network access management.
6. Partner with engineering teams to review architecture design changes.

Qualifications:

1. At least 5 years of experience in cloud security with deep expertise in AWS or GCP.
2. Ability to deploy cloud infrastructure using Terraform and develop automations or guardrails with Golang or Ruby.
3. Execution-focused mindset, capable of navigating ambiguity and delivering results.
4. Passion for building an open financial system that unites the world.

Nice to Have:

1. At least 2 years of experience with Kubernetes security controls.
2. Experience writing rego rules for Open Policy Agent (OPA) or similar.
3. Experience with detection platforms like Wiz, AWS Config, or GCP Security Health Analytics.
4. Advanced cloud security certifications such as AWS Certified Security - Specialty, Google Cloud Certified - Professional Cloud Security Engineer, or Certified Kubernetes Security Specialist (CKS).

Additional Information:

Pay Range: $185,500 CAD annually, including bonus, equity, and benefits.

Commitment to Diversity and Equal Opportunity:

Coinbase is proud to be an Equal Opportunity Employer, welcoming applicants regardless of race, gender, age, disability, and other protected statuses. We also consider qualified applicants with criminal histories in accordance with applicable laws.

For US applicants, view the Know Your Rights notice. We provide reasonable accommodations for individuals with disabilities; contact us at accommodations[at]coinbase.com.

Privacy and Data Notice:

Our data privacy policies are outlined here. By applying, you agree to our data processing practices and arbitration terms here.