Senior Cloud Security Engineer in Vancouver

We’re looking for an experienced Senior Cloud Security Engineer to join the Jotform team. This is an opportunity to make your mark on a cutting edge environment and advance our infrastructure security to the next level. This person will be primarily responsible for all aspects of infrastructure security, including developing security tooling to detect security issues, implementing best practices, and creating/maintaining secure system baselines across a multi-cloud environment.

Responsibilities

• Designing, scaling, and deploying various cloud security controls and services across AWS and GCP using a combination of cloud platform native and open source tools and SIEM integration.
• Create actionable output for the SecOps team.
• Design and build process automation solutions to ensure systems meet security benchmarks (e.g., CIS) and satisfy operational compliance requirements.
• Demonstrate strong knowledge of NIST 800-53 security controls and apply that expertise to support FedRAMP/GovRAMP compliance efforts, translating requirements into effective and actionable security measures.
• Build and maintain secure, hardened operating system images, primarily in Linux.
• Design and implement monitoring controls for Linux systems.
• Analyze infrastructure security findings and vulnerabilities.
• Partner with DevOps and other teams to mitigate findings and create security solutions.
• Recommend new security solutions and tooling as necessary to bring security posture to the next level.
• Collaborate with other members of the Security Team on other tasks as required.

Qualifications

• 5+ years of experience with infrastructure, with a heavy focus on cloud security.
• Proven expertise in either AWS or GCP required, utilizing infrastructure-as-code solutions such as Terraform is highly desirable.
• 2+ years of hands-on automated script design, coding, debugging, and maintenance skills (using Bash & Python).
• A good practical knowledge of security technologies and wider business solutions including Firewalls, IDS/IPS, Identity and access management, SIEM, Data Loss Protection, BCP, network security in a cloud-first setting.
• The ability to use a wide variety of technologies, including CI/CD tools, infrastructure automation, code repositories, and security vulnerability identification tools to support our cloud infrastructure.
• Experience with infrastructure hardening standards, performing infrastructure as code scanning, vulnerability management, and threat hunting.
• Ability to work cross-functionally across Developers, DevOps, and Engineering teams in a dynamic environment to promote/implement a strong security program.
• Passionately strive towards automating everything.

Please note, for federal security requirements, this role requires US citizenship.

Jotform is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.