Senior Security Specialist – Cloud

Jobtailor; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

Jobtailor in Toronto seeks a cloud security specialist to assess and strengthen public cloud environments across AWS, Azure, and Google Cloud. You will design analyses, implement mitigations, and help mature security postures in production.

The role includes hands-on Red and Purple Team exercises, development of offensive tradecraft and tooling, and close collaboration with Cloud Security, Threat Hunting, SOC/IR, and stakeholders to reduce risk and improve incident response.

Qualifications

• Scripting/automation using cloud APIs or CLIs is required.
• Strong grasp of modern cloud-centric architectures and DevOps.
• Extensive experience with AWS, Azure, or GCP.
• Experience building systems on AWS/Azure/GCP platforms.
• Hands-on with Ansible, Puppet, CloudFormation, Terraform, and Jenkins.
• Background in PaaS/SaaS environments, SLA, HA, patching, networking, security.
• Solid Linux and Windows technical understanding.
• Ability to communicate complex topics to non-technical audiences.
• Cloud/security certifications are a plus.
• Experience running Kubernetes environments and multi-tenancy security is a plus.
• 3+ years in Cyber Security with network/app layer testing is a plus.
• Ability to analyze complex security events and set achievable goals.
• Ability to build and maintain relationships with stakeholders.

Responsibilities

• Assess and improve the security of public cloud environments across AWS, Azure, and GCP.
• Participate in hands-on Red and Purple Team exercises in mature production environments.
• Develop, evolve, and refine offensive tradecraft and tooling.
• Partner with Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, SOC/IR, and ATO teams.
• Liaise with cloud operations, internal customers, and stakeholders regarding security incidents and trends.

Skills

Scripting/Automation

Cloud Platforms Experience

Cloud Architecture

DevOps Principles

Cyber Security Experience

Vulnerability Analysis

Goal Setting

Relationship Building

Linux/Windows Knowledge

Communication of Technical Concepts

Tools

Ansible

Puppet

CloudFormation

Terraform

Jenkins

Kubernetes

Job description

• Assess and improve the security of public cloud environments across AWS, Microsoft Azure, and Google Cloud Platform


• Participate in hands-on Red and Purple Team Exercises in mature production environments


• Develop, evolve, and refine offensive tradecraft and tooling


• Partner with Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, SOC/IR, and ATO ML/AI analytics teams


• Liaise with cloud operations, internal customers, the security operations center, business stakeholders, and management regarding information security incidents and trends

Requirements

• Experience in scripting/automating operations via various cloud APIs or CLIs


• Good understanding of modern, cloud-centric architectures and DevOps principles


• Strong experience managing AWS, Microsoft Azure, or Google Cloud Platform


• Strong experience building systems and/or platforms using AWS, Microsoft Azure, or Google Cloud Platform


• Intermediate experience with Ansible or Puppet, CloudFormation or Terraform, and Jenkins


• Background in PaaS/SaaS environment practices, including maintaining SLAs, load-balancing, high availability, operating system patching, networking, and security management/patching


• Strong technical understanding of Linux and Windows hardware and software platforms


• Ability to communicate complicated technical concepts or attack paths to broader non-technical audiences


• Certifications in information security, AWS, Azure, or GCP are nice-to-have


• Experience running Kubernetes environments and understanding multi-tenancy and security implications is nice-to-have


• 3+ years of Cyber Security experience with background executing network/application-layer penetration tests is nice-to-have


• Ability to analyze complex security and vulnerability events


• Ability to set ambitious but achievable goals and surpass them


• Ability to build, grow, and maintain internal and external relationships

Core Competencies

Demonstrates expertise in securing public cloud environments across AWS, Microsoft Azure, and Google Cloud Platform, with strong capabilities in scripting, automation, and cloud architecture. Proficient in collaborating with cross-functional teams to address security incidents and enhance operational resilience.

Highest-signal resume keywords

• AWS Management


• Microsoft Azure Management


• Google Cloud Platform Management


• Scripting/Automation via Cloud APIs


• Cyber Security Experience

Hard Skills

• Cloud Security


• Offensive Tradecraft


• DevOps Principles


• Ansible


• Puppet


• CloudFormation


• Terraform


• Jenkins


• Linux Technical Understanding


• Windows Technical Understanding

Soft Skills

• Communication of Technical Concepts


• Relationship Building


• Goal Setting

Certifications & Qualifications

• Information Security Certification


• AWS Certification


• Azure Certification


• GCP Certification

Industry Keywords

• Cloud-Centric Architectures


• Security Management


• Network/Application-Layer Penetration Testing


• Vulnerability Analysis


• Incident Response

Tools & Technologies

• Kubernetes


• PaaS Practices


• SaaS Practices


• Load-Balancing


• High Availability