Requisition Title: Senior Cloud Security & Dev

SecOps Engineer Location: Greater Toronto Area / Hybrid Experience: 6+ years Role Overview We are seeking a Senior Cloud Security & Dev

SecOps Engineer to design, secure, automate, and operate enterprise multi-cloud platforms.

The role will embed security controls into infrastructure, CI/CD pipelines, container platforms, and application-delivery processes while improving reliability, compliance, and operational resilience.

The successful candidate will bring strong experience across AWS, Azure, infrastructure as code, Kubernetes, cloud security, identity and access management, vulnerability management, observability, incident response, and site reliability engineering.

Key Responsibilities Architect and maintain secure, scalable cloud and cloud-native environments.

Embed security controls into CI/CD pipelines and infrastructure-provisioning workflows.

Develop infrastructure as code using Terraform and configuration automation using Ansible.

Design and implement least-privilege IAM, encryption, secrets management, logging, and cloud-governance controls.

Support AWS security capabilities across networking, compute, storage, monitoring, threat detection, and configuration management.

Implement security scanning, policy enforcement, SAST, DAST, and container-security controls.

Manage cloud-native deployments using Docker, Kubernetes, Jenkins, and Azure Dev

Ops.

Design high-availability, blue-green deployment, rollback, and disaster-recovery strategies.

Build monitoring, alerting, and observability solutions using Cloud

Watch, Datadog, ELK, Splunk, or comparable platforms.

Conduct vulnerability assessments, patch management, server hardening, and security-remediation activities.

Participate in threat modeling, security architecture reviews, attack-surface analysis, and risk assessments.

Support incident triage, log correlation, root-cause analysis, escalation,



and response playbooks.

Implement and review controls aligned with PCI DSS, SOC 2, ISO 27001, and CIS benchmarks.

Support Site Reliability Engineering practices covering availability, scalability, performance, and operational excellence.

Maintain technical documentation, standard operating procedures, and security playbooks.

Required Skills Strong experience with AWS and working knowledge of Azure or GCP.

Hands-on experience with Terraform, Ansible, Docker, Kubernetes, Jenkins, and Azure Dev

Ops.

Robust experience with AWS IAM, VPC, EC2, EKS, ECS, S3, Cloud

Watch, AWS Config, KMS, WAF, and load-balancing services.

Experience with cloud security, IAM governance, network security, encryption, and secrets management.

Experience implementing infrastructure as code and automated CI/CD pipelines.

Experience with SIEM, vulnerability management, security scanning, and incident response.

Scripting skills using Python, Bash, or Power

Shell.

Knowledge of SAST, DAST, EDR, NDR, PAM, Active Directory, and firewall controls.

Experience with monitoring and observability tools.

Understanding of SRE, high availability, resilient systems, and production reliability.

Familiarity with security and compliance frameworks such as PCI DSS, SOC 2, ISO 27001, and CIS.

Preferred Skills Experience with Guard

Duty, Security Hub, Cloud

Trail, Wazuh, or similar security platforms.

Experience with Snowflake and SaaS platform operations.

Knowledge of Kafka, RabbitMQ, Redis, PostgreSQL, MySQL, or Oracle.

Exposure to MITRE ATT&CK;, MITRE ATLAS, and OWASP guidance for AI or LLM applications.

Experience securing AI platforms or automating adversarial security testing.

Familiarity with Git

Hub Copilot or AI-enabled development tooling.

Education Degree in Computer Science, Cybersecurity, Software Engineering, or a related field.

Advanced cybersecurity education or industry certifications are considered assets.

📌 Senior Cloud Security & DevSecOps Engineer (Toronto)
🏢 Lorven technologies
📍 Toronto