Cloud Application Security Engineer

WeHireYou; Indiana (PA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Hybrid work model

Wellness program with Headspace

Job summary

Trulioo seeks a Cloud Application Security Engineer to strengthen our cloud security posture for our SaaS platform. You will work on AWS-based infrastructure, Kubernetes, and CI/CD security in a 24/7 hybrid setting, contributing to automation and secure platform operations.

The role emphasizes on-call coverage, threat modeling, and collaboration with DevOps, Engineering, and security teams to protect customers worldwide.

Qualifications

• Experience with AWS and modern cloud-native environments.
• Experience securing containerized environments and Kubernetes platforms.
• Experience implementing security controls within CI/CD pipelines.

Responsibilities

• Design, implement, and operate cloud/app security across CI/CD pipelines and prod environments.
• Support app security reviews and threat modeling including code reviews, SAST/DAST.
• Manage vulnerability processes across app and infra layers with CI/CD workflows.
• Implement AWS security guardrails with monitoring and alerting.
• Support Kubernetes/container security controls (RBAC, network policies).
• Automate security workflows to improve response times and efficiency.
• Ensure IaC security practices (Terraform deployments).
• Monitor systems for irregular behavior and assist in incident response.

Skills

AWS

Kubernetes

CI/CD security

Threat modeling

Code review

Education

Bachelor’s degree in CS/Engineering

Tools

Terraform

Guardrails

Job description

Cloud Application Security Engineer

Are you ready to embark on a career that truly affects people around the world? Trulioo invites you to be a catalyst for change in the dynamic realm of digital identity verification.

As the global front-runner in our industry, we are redefining how businesses grow, innovate and comply online.

Picture yourself at the forefront of innovation, contributing to our award-winning platform that enables organizations worldwide to quickly onboard customers, optimize costs and combat fraud.

Fueled by Silicon Valley support, Trulioo stands as the trusted platform that can verify more than 5 billion people and 700 million business entities spanning 195 countries.

But Trulioo is more than a tech company. We are a united force of dedicated experts committed to establishing trust online - and we’re proud to be recognized as a BC Top Employer for the second consecutive year, reflecting our commitment to an inclusive, collaborative, and people-first workplace.

Headquartered in Vancouver and with strategic hubs in San Diego and Dublin, we foster a culture of collaboration and open communication.

Our offices support a hybrid model and staff typically work three days per week at a hub location.

Join us where excitement meets innovation and contribute to a world where trust and technology unite.

What We Offer

• Comprehensive Benefits: We provide a robust benefits package for full-time, permanent employees, including health, dental, and vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend (equivalent to $1,000 in local currency). Specific benefits may vary by location and will be discussed further during the interview process.
• Flexible Hybrid Working Environment: Our offices are designed to support both collaboration and flexibility. Enjoy weekly lunches, quality coffee, and regular social events. Many locations also feature parent rooms, on-site gyms, comfortable lounges, and adaptable workstations to support your comfort and productivity.
• Wellness: We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized.
• Employee Resource Groups: Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies. We host informative, fun sessions and celebrations that are often open to the entire organization.

Position Summary

We are seeking a Cloud Application Security Engineer to join our ISC team and support the continued improvement of the cloud application security posture for Trulioo’s SaaS platform.

Reporting to the Senior Director, Technology Infrastructure and Security, you will contribute to securing applications and infrastructure hosted in AWS. This role focuses on supporting scalable, automated security solutions that balance strong protection with developer productivity. This is a hands-on role within a 24/7 environment that includes participation in on-call escalation coverage for security incidents. This role is ideal for someone looking to deepen their experience in cloud, Kubernetes, and CI/CD security within a collaborative engineering environment.

This role is expected to leverage AI and emerging technologies to improve productivity, enhance decision-making, and continuously optimize how work is performed.

This will be a full-time, permanent position working out of the Vancouver office on a hybrid model (3 days per week in the office).

What You'll Be Doing:

• Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments
• Support application security reviews and threat modeling, including code review, static and dynamic testing
• Support vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows
• Assist in implementing and maintaining AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting
• Support Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations
• Contribute to automation of security workflows to reduce manual effort and improve response times
• Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments
• Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation
• Support reporting and continuous improvement of security controls and operational security processes
• Support the evaluation and adoption of AI-assisted security and operational workflows
• Work closely with senior engineers and cross-functional teams to support secure platform operations and continuous improvement initiatives

What You'll Bring:

• 2-5 years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments
• Bachelor’s degree in computer science, engineering, or equivalent experience
• Experience working with cloud security technologies, preferably AWS, including implementation of security controls and guardrails
• Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including implementing controls in production environments
• Experience implementing security controls within CI/CD pipelines and...