Position: Tech Lead Cloud Security Engineer at the Canadian product company
Company: Alcor
Experience required: 5y
English level: upper

As the fastest-growing online brokerage in Canada, our company is committed to helping Canadians become much more financially successful and secure. Our vision is to revolutionize financial services by offering the most innovative and cost-efficient financial services – including banking. The company Technology Group (QTG) is home to a unique environment, where our culture thrives and, most importantly, we get stuff done! It is continuing with its digital transformation initiative, and our infrastructure footprint is growing beyond our data centers and into the Google Cloud Platform, on an exciting strategy that is driven by business value.

Your mission:
At our company, you will have the autonomy to get things done. Balance strategy and tactics with hands-on experience as you communicate your plans and then share your results. Your mission is to enable and equip product builders to “think about security” while providing them with the knowledge and tools to “shift left”.

Need more details? Keep reading...

As a Tech Lead in Security Engineering you will:
● Cloud and Container Security automation:
○ Collaborate with Cloud Infrastructure Engineers to implement and co-develop Security-as-Code
○ Participate and enhance the Secure Software Development Lifecycle (SSDLC) process in collaboration with Cloud Software Engineers
○ Define and automate security controls through policy-based solutions
● Lead, design and co-develop cloud security architecture and design at enterprise level:
○ Create cloud infrastructure security patterns, standards and guidelines
○ Contribute to threat modeling of cloud applications and systems (e.g., experience using STRIDE)
● Support the implementation, automation, and configuration of DevSecOps capabilities and enhancements
● Provide expertise on cloud security architecture to other IT and business teams

An ideal candidate:
● Has strong experience in cloud infrastructure
● Has strong experience in Container Security
● Can read and understand the Architecture & design of a cloud-native application
● Can anticipate security threats and offer ideas on how to eliminate them
● Can write code and/or scripts in a language like Python or Bash to support CICD enhancements
● Has working knowledge of Gitlab CI
● Has networking experience
● Has experience developing tools or applications
● Has work experience within an international company