Our partner is looking for a Senior Security Specialist – Cloud Red Team (Global Security) based in Canada. We are seeking an experienced cloud security professional to strengthen the security and resilience of complex public cloud environments. You will work across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP), helping assess and secure critical production systems.

Collaborating with cloud security, operations, threat intelligence, and incident response specialists, you will contribute to the evolution of offensive security tools and techniques. You will also translate complex attack paths and technical findings into actionable recommendations for technical teams and business stakeholders.

Assess public cloud security: Evaluate and improve the security posture of cloud environments across AWS, Microsoft Azure, and Google Cloud Platform, identifying weaknesses and recommending practical remediation strategies. Participate in hands‑on security assessments within mature production environments, simulating attack techniques and working with defensive teams to strengthen detection and response capabilities.

Develop offensive security capabilities: Contribute to the development, refinement, and maintenance of offensive security tooling, automation, and tradecraft to improve testing effectiveness.

Automate cloud security operations: Use cloud APIs, command‑line interfaces, and scripting to support security testing, automate operational tasks, and assess cloud configurations.

Collaborate with security and operations teams: Partner with Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, Security Operations Center, Incident Response, and machine learning and AI analytics teams to deliver meaningful security improvements. Investigate complex security events, identify potential exploitation paths, assess operational risks, and provide transparent, actionable recommendations.

Communicate security findings:



Explain technical vulnerabilities, attack scenarios, incidents, and emerging trends to cloud operations teams, internal customers, security professionals, business stakeholders, and management.

Support cloud infrastructure security: Assess architectures, configurations, deployment pipelines, networking, patching, high availability, and other controls that influence the security and reliability of cloud‑hosted services.

Promote continuous security improvement: Work collaboratively with technical and defensive teams to improve security practices, strengthen organizational resilience, and evolve assessment methodologies. Strong hands‑on experience managing and building systems or platforms on at least one major public cloud provider: AWS, Microsoft Azure, or Google Cloud Platform.

Cloud architecture and DevOps: Good understanding of modern cloud‑centric architectures, DevOps principles, and the operational practices required to maintain secure and reliable cloud environments. Intermediate experience with configuration management and orchestration tools such as Ansible or Puppet, infrastructure‑as‑code platforms such as Terraform or CloudFormation, and CI/CD tools such as Jenkins. Understanding of PaaS and SaaS environments, including service‑level agreements, load balancing, high availability, operating system patching, networking, and security management.

Operating systems and technical foundations: Strong technical understanding of Linux and Windows environments, along with relevant hardware and software platforms.

Security communication: Ability to explain complex technical concepts,



vulnerabilities, and attack paths in clear, accessible language for both technical and non‑technical audiences.

Experience in cybersecurity is an advantage, particularly three or more years of experience conducting network‑layer or application‑layer penetration testing.

Security certifications: Relevant information security or cloud certifications in AWS, Azure, or GCP are considered an asset.

Experience operating Kubernetes environments and understanding multi‑tenancy and its security implications is desirable. Ability to assess complex security events, interpret vulnerability findings, evaluate risk, and develop effective solutions. Strong decision‑making, problem‑solving, communication, and relationship‑building skills, with the ability to collaborate across teams and influence security improvements.

Salaried compensation with a comprehensive total rewards program, including bonuses and competitive benefits.

Flexible benefits: Access to a flexible benefits program designed to support a range of employee needs.

Dedicated training budget: Annual funding for professional training and industry conference attendance. Access to industry‑leading public and private training opportunities to deepen cloud security and offensive security expertise. Coaching, training, and development opportunities supported by leaders invested in employee growth. Work alongside experienced offensive security specialists and cross‑functional cybersecurity teams in a energetic, high‑performing setting.

Flexible work arrangements: Hybrid and remote‑work flexibility, with options designed to support work‑life balance. Opportunities to take on greater responsibilities, expand technical expertise, and advance professionally. A commitment to collaboration, respect, diverse perspectives, and an environment where employees are supported in their professional development. #

📌 Senior Security Specialist - Cloud Red Team(Global Security) (Winnipeg)
🏢 Jobgether
📍 Winnipeg