Senior Cloud Application Security Engineer

Trulioo•Vancouver, BC

11d•Hybrid

About The Position

Trulioo is a global leader in digital identity verification, enabling businesses to grow, innovate, and comply online. Their award-winning platform verifies over 5 billion people and 700 million business entities across 195 countries, facilitating quick customer onboarding, cost optimization, and fraud prevention. Recognized as a BC Top Employer, Trulioo fosters an inclusive, collaborative, and people-first workplace with headquarters in Vancouver and strategic hubs in San Diego and Dublin, supporting a hybrid work model. The Senior Cloud Application Security Engineer will join the ISC team to manage the cloud application security posture for Trulioo’s SaaS platform. Reporting to the Sr. Director, Technology Infrastructure and Security, this role involves hands-on work in securing applications and infrastructure hosted in AWS. The engineer will collaborate closely with Engineering and DevOps teams to design, implement, and operate security controls, focusing on building scalable, automated security solutions that balance strong protection with developer productivity. This is a full-time, permanent position working out of the Vancouver office on a hybrid model (3-days per week in the office), and includes participation in on-call escalation coverage for security incidents within a 24/7 environment.

Requirements

Strong experience in cloud security, preferably AWS, with hands-on implementation of security controls and guardrails
Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including designing and implementing controls in production environments
Strong experience implementing security controls within CI/CD pipelines and influencing developer workflows
Experience with vulnerability management across application and infrastructure layers, including prioritization and remediation workflows
Hands-on experience with AWS security services such as SecurityHub, GuardDuty, IAM, Config, Control Tower, CloudWatch, and related tooling
Strong DevSecOps experience with a cloud provider, ideally AWS
Strong scripting and automation experience (Python, Terraform, or similar), with a focus on reducing manual operational work
Experience with monitoring and logging platforms (e.g., Sumo Logic or equivalent)
Knowledge of security frameworks and standards (e.g., OWASP Top 10, ISO 27001, SOC 2)
Strong technical background in Linux and cloud-based systems
Ability to operate independently and prioritize effectively in a dynamic environment
Strong problem-solving and critical thinking skills, with a focus on practical, scalable solutions
Excellent communication and collaboration skills across engineering and security teams
5+ years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments
Bachelor’s degree in computer science, engineering, or equivalent experience

Nice To Haves

AWS certifications

Responsibilities

Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments
Lead and support application security reviews and threat modeling, including code review, static, and dynamic testing
Own and improve vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows
Establish and maintain AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting
Design and implement Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations
Drive automation of security workflows to reduce manual effort and improve response times
Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments
Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation
Track and report on the effectiveness of security controls and continuously improve security posture
Research and evaluate emerging technologies and security trends to improve platform security and operational efficiency