Cloud Application Security Engineer

Trulioo•Vancouver, BC

2d•CA$80,000 - CA$100,000•Hybrid

About The Position

We are seeking a Cloud Application Security Engineer to join our ISC team and support the continued improvement of the cloud application security posture for Trulioo’s SaaS platform. Reporting to the Senior Director, Technology Infrastructure and Security, you will contribute to securing applications and infrastructure hosted in AWS. This role focuses on supporting scalable, automated security solutions that balance strong protection with developer productivity. This is a hands-on role within a 24/7 environment that includes participation in on-call escalation coverage for security incidents. This role is ideal for someone looking to deepen their experience in cloud, Kubernetes, and CI/CD security within a collaborative engineering environment. This will be a full-time, permanent position working out of the Vancouver office on a hybrid model (3 days per week in the office).

Requirements

2-5 years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments
Bachelor’s degree in computer science, engineering, or equivalent experience
Experience working with cloud security technologies, preferably AWS, including implementation of security controls and guardrails
Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including implementing controls in production environments
Experience implementing security controls within CI/CD pipelines and supporting developer workflows
Experience with vulnerability management across application and infrastructure layers, including prioritization and remediation workflows
Hands-on experience with AWS security services such as SecurityHub, GuardDuty, IAM, Config, Control Tower, CloudWatch, and related tooling
Experience working within DevSecOps environments and CI/CD workflows, ideally in AWS-based infrastructure (bonus points for AWS certifications)
Strong scripting and automation experience (Python, Terraform, or similar), with a focus on reducing manual operational work
Experience with monitoring and logging platforms (e.g., Sumo Logic or equivalent)
Knowledge of security frameworks and standards (e.g., OWASP Top 10, ISO 27001, SOC 2)
Strong technical background in Linux and cloud-based systems
Ability to manage competing priorities and operate effectively within a collaborative team environment
Strong problem-solving and critical thinking skills, with a focus on practical, scalable solutions
Excellent communication and collaboration skills across engineering and security teams

Nice To Haves

AWS certifications

Responsibilities

Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments
Support application security reviews and threat modeling, including code review, static and dynamic testing
Support vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows
Assist in implementing and maintaining AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting
Support Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations
Contribute to automation of security workflows to reduce manual effort and improve response times
Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments
Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation
Support reporting and continuous improvement of security controls and operational security processes
Support the evaluation and adoption of AI-assisted security and operational workflows
Work closely with senior engineers and cross-functional teams to support secure platform operations and continuous improvement initiatives