Cloud Security Engineer

You will work as part of a team assessing and improving the security of RBC's public cloud environments (Amazon Web Services, Microsoft Azure, and Google Cloud Platform).

Responsibilities:

• Participate in hands-on execution of Red and Purple Team Exercises in mature production environments.
• Assist in developing, evolving, and refining offensive tradecraft and tooling.
• Forge partnerships with defensive teams such as Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, SOC / IR, and ATO ML/AI analytics team to drive pragmatic cyber security improvement.
• Effectively liaise and communicate with the cloud operations group, internal customers, security operations center, key business stakeholders, and management regarding information security incident events and trends.

Requirements:

• Experience in scripting/automating operations via various cloud APIs or CLIs.
• A good understanding of modern, cloud-centric architectures and DevOps principles.
• Strong experience managing cloud platforms: Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
• Strong experience building systems and/or platforms using Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
• Intermediate experience working with orchestration and configuration management systems such as Ansible or Puppet, and infrastructure-as-code systems such as CloudFormation or Terraform, and CI/CD tools such as Jenkins.
• A background in PaaS/SaaS environment practices, including: maintaining SLAs, load-balancing, high availability, operating system patching, networking, and security management/patching.
• Strong technical understanding in a variety of hardware and software platforms (Linux & Windows).
• The ability to communicate complicated technical concepts or attack paths which compromise operations in a form that is easily digestible by a broader audience who may not be technical.

Nice-to-Have:

• Certifications in information security, AWS, Azure, or GCP.
• Experience with running Kubernetes environments and understanding of multi-tenancy and security implications.
• 3+ years of Cyber Security experience with background executing network/application layer penetration tests.
• Ability to analyze complex security and vulnerability events.

Benefits:

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
• Dedicated budget for annual training and conference attendance.
• Leaders who support development through coaching, training, and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team.
• Flexible work/life balance options including a hybrid-remote working environment.
• Opportunities to do challenging work.
• Opportunities to take on progressively greater accountabilities.
• Opportunities to build close relationships with various cyber security teams.