Senior Infrastructure Security Engineer

Clio

1d•Hybrid

About The Position

Clio is seeking a Senior Infrastructure Security Engineer to join its Security team. This role focuses on building proactive security solutions, implementing detection capabilities, and driving security automation at scale. The position offers exposure to new challenges and technologies, with the opportunity to make a significant impact. This role is open to candidates across North America (US and Canada). Candidates near Clio's hubs (Burnaby, Calgary, or Toronto) are expected to work in the office a minimum of twice per week on designated Anchor Days.

Requirements

Cloud Security expertise with 3+ years in securing AWS environments
Hands-on expertise with Kubernetes and/or EKS, including autoscaling, CI/CD, and automation
Adept at using IaC technologies like Terraform, Puppet, CloudFormation, or Ansible
Skilled in securing cloud infrastructure such as AWS, GCP/GSuite, GitHub, and IdP
Familiarity in a cloud-first organization, including experience with AWS and/or GCP
Ability to program in a dynamic programming language: Python, Ruby
Strong understanding of threat vectors, indicators of compromise, malicious behaviour identification, and emerging threat analysis.
Strong Linux experience
Demonstrate a keen interest in improving your craft by using AI

Nice To Haves

Strong Azure and/or GCP security experience to go with your AWS experience
Any security certifications such as AWS Security Specialist, OSCP, CKS, GCPN, CISSP or others
Experience with Ruby on Rails, Puppet, Terraform, ELK (Elastic/OpenSearch, Logstash and Kibana)
Infrastructure security (firewalls, ACLs, authentication, device hardening)
Container Security Tools familiarity with Falco, OPA/Gatekeeper, container image scanning, and runtime protection

Responsibilities

Implement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security, EC2 hardening, and cloud-native protection
Partner with the cloud security manager to plan and develop the team’s road map
Develop and tune rules for cloud-specific threats, manage GuardDuty/Defender integration, and build automated response workflows
Investigate potential security incidents and serve as initial incident responder
Provide architectural guidance for securing user environments and maintaining a good security posture
Secure Kubernetes workloads, implement pod security standards, and integrate security scanning into CI/CD pipelines
Stay up-to-date with current methods of cloud compromise, tools, tactics, and procedures
Work in a small team where you can make a big impact

Benefits

Competitive, equitable salary
Top-tier health benefits
Dental insurance
Vision insurance
Hybrid work environment
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching
RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years