Senior Security Specialist - Cloud (Global Security)

Jobgether; Toronto; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Bonuses

Stock options

Training budget

Conference access

Hybrid-remote

Job summary

Jobgether, on behalf of a partner company, seeks a Senior Security Specialist - Cloud (Global Security) based in Canada to strengthen security across AWS, Azure, and Google Cloud Platform. You will combine offensive security expertise with cloud engineering to identify weaknesses and elevate resilience in critical production environments.

You will collaborate with Cloud Security, Operations, Threat Hunting, Threat Intelligence, SOC/Incident Response, and AI analytics teams to translate complex

Qualifications

• Experience securing public cloud platforms (AWS/Azure/GCP).
• Hands-on capability building systems in cloud environments.
• Understanding of cloud-native architectures, DevOps, and cloud security practices.
• Scripting/automation using cloud APIs/CLIs.
• Experience with IaC tools like Terraform or CloudFormation and with Ansible or Puppet.
• Experience with CI/CD (e.g., Jenkins) and secure software delivery.
• Knowledge of PaaS/SaaS environments, including SLAs, load balancing, HA, OS patching, networking, security management.
• Strong Linux/Windows fundamentals and broad tech knowledge.
• 3+ years in cybersecurity, incl. offensive security activities.
• Kubernetes operation experience; multi-tenancy security is a plus.
• Certifications in information security or cloud platforms are a plus.
• Analytical, proactive, detail-oriented, and capable of communicating risks to executives.
• Collaborative team player with the ability to build cross-team relationships.

Responsibilities

• Assess and improve security posture of cloud environments across AWS, Azure, and GCP.
• Participate in Red Team and Purple Team exercises in production environments.
• Develop and maintain offensive security tradecraft, tooling, and automation.
• Collaborate with security, operations, threat intelligence, SOC, and AI analytics teams to drive security improvements.
• Automate security operations and workflows via cloud APIs/CLIs.
• Engage with stakeholders during incidents and communicate emerging threats.
• Analyze complex security events and provide actionable cloud resilience improvements.
• Convey technical risks clearly to both technical and non-technical audiences.
• Contribute to security initiatives across cloud architecture, DevOps, infra, apps, and platform security.

Skills

Public cloud security

AWS/Azure/GCP

Scripting & automation

IaC

Kubernetes security

Executive communication

Threat intel collaboration

Tools

Ansible

Puppet

CloudFormation

Terraform

Jenkins

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Specialist - Cloud (Global Security) based in Canada.

As a Senior Security Specialist, you will help strengthen the security of complex public cloud environments across AWS, Microsoft Azure, and Google Cloud Platform. You will combine offensive security expertise with hands-on cloud engineering to identify weaknesses and improve resilience in critical production environments. The role provides opportunities to participate in Red and Purple Team exercises while evolving security tradecraft, automation, and tooling. You will work closely with cloud security, operations, threat hunting, intelligence, SOC/incident response, and AI analytics teams. Your ability to translate sophisticated attack paths and technical risks into clear business language will be essential. This is a collaborative, high-performing environment where continuous learning, technical excellence, and meaningful security improvements are strongly encouraged.

Accountabilities:

• Assess and improve the security posture of public cloud environments across Amazon Web Services, Microsoft Azure, and Google Cloud Platform.
• Participate hands-on in Red Team and Purple Team exercises within mature production environments, identifying attack paths, vulnerabilities, and opportunities for defensive improvement.
• Develop, refine, and maintain offensive security tradecraft, automation, and tooling to support cloud security assessments and exercises.
• Build strong partnerships with Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, SOC/Incident Response, and AI/ML analytics teams to drive practical cybersecurity improvements.
• Use cloud APIs and command-line interfaces to automate security operations, assessments, and other technical workflows.
• Collaborate with cloud operations teams, internal customers, security operations, business stakeholders, and management during information security incidents and when communicating emerging threats and trends.
• Analyze complex security and vulnerability events and provide actionable recommendations to improve cloud resilience.
• Communicate sophisticated technical concepts, attack paths, and security risks in a clear and accessible way for both technical and non-technical audiences.
• Contribute to security initiatives across cloud architecture, DevOps practices, infrastructure, applications, operating systems, networking, and platform security.

Requirements

• Strong professional experience managing and securing public cloud platforms, with hands-on expertise in AWS, Azure, or GCP.
• Demonstrated experience building systems or platforms within one or more major public cloud environments.
• Strong understanding of modern cloud-centric architectures, DevOps principles, and cloud security practices.
• Experience scripting and automating operational or security activities using cloud APIs, CLIs, or similar tools.
• Intermediate experience with orchestration and configuration management technologies such as Ansible or Puppet, as well as infrastructure-as-code tools such as CloudFormation or Terraform.
• Experience with CI/CD technologies such as Jenkins and an understanding of secure software delivery practices.
• Knowledge of PaaS/SaaS operating environments, including SLAs, load balancing, high availability, operating system patching, networking, and security management.
• Strong technical understanding of Linux and Windows platforms, as well as a broad range of hardware and software technologies.
• 3+ years of cybersecurity experience, ideally including network- and application-layer penetration testing or offensive security activities.
• Experience operating Kubernetes environments and understanding multi-tenancy and its security implications is an advantage.
• Relevant certifications in information security, AWS, Azure, or GCP are considered a plus.
• Strong analytical, problem-solving, decision-making, and strategic-thinking capabilities, with a high level of attention to detail.
• Ability to communicate complex security concepts and technical attack paths effectively to executives, business stakeholders, and broader audiences.
• Highly motivated and performance-oriented, with the ability to set ambitious goals, work through challenging problems, and consistently deliver results.
• Collaborative team player who can build, maintain, and strengthen relationships across technical, business, and security teams.

Benefits

• Comprehensive total rewards program, including bonuses and flexible benefits.
• Competitive compensation, with commissions and stock opportunities where applicable.
• Dedicated annual budget for professional training and conference attendance.
• Access to industry-leading public and private training opportunities to continuously expand technical expertise.
• Coaching, mentorship, and development opportunities supported by experienced leaders.
• Hybrid-remote working environment designed to support flexibility and work-life balance.
• Opportunity to work in complex and critical environments while collaborating with experienced offensive security professionals.
• Exposure to challenging cybersecurity initiatives and progressively greater levels of responsibility.
• Opportunity to make a meaningful and lasting impact on the security of critical technology environments.
• Dynamic, collaborative, progressive, and high-performing team environment.
• Opportunities to build strong relationships across diverse cybersecurity disciplines and expand your professional network.
• Full-time, regular salaried position based in Toronto, Canada, with a standard 37.5-hour work week.

We appreciate your interest and wish you the best!