Senior Infrastructure Security Engineer

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Infrastructure Security Engineer based in Canada. This is an exciting opportunity to join a fast-growing technology organization developing an AI-native platform that is transforming traditional insurance operations. As a Senior Infrastructure Security Engineer, you will play a dual role in strengthening cloud infrastructure and establishing robust security practices across the engineering organization. You will oversee critical infrastructure, cloud environments, Kubernetes operations, automation, and system observability while driving improvements to security processes and compliance standards. Working closely with engineering and cross-functional teams, you will help ensure that systems remain secure, scalable, reliable, and resilient as the business expands. You will also contribute to incident response, disaster recovery planning, and the continuous improvement of secure software development practices. This role offers the opportunity to take ownership of impactful technical initiatives, work with modern cloud-native technologies, and help shape the security foundations of an innovative AI-driven platform. Accountabilities: - Support incident management and resolution activities, helping coordinate responses, investigate security incidents, and implement effective remediation measures. - Lead the continuous improvement of incident management procedures, ensuring that established processes are documented, followed consistently, and regularly reviewed. - Strengthen the Secure Software Development Lifecycle (SSDLC) by implementing security improvements across software development processes, vulnerability detection, and remediation workflows. - Oversee vulnerability scanning and remediation activities, ensuring identified security issues are prioritized and addressed within established timelines. - Develop security documentation, educational resources, and awareness materials to help engineering teams adopt secure development practices.

- Streamline the handling of customer security questionnaires by developing tools, automations, and systems that improve response efficiency and accuracy. - Assess potential business continuity risks and develop comprehensive disaster recovery and business continuity plans. - Coordinate recurring disaster recovery exercises and validate the effectiveness of established recovery procedures. - Collaborate with cross-functional engineering teams to provide infrastructure support for new features, services, and platform capabilities. - Improve and automate infrastructure management and deployment workflows using tools such as Terraform, Argo, and GitHub Actions. - Manage, maintain, and optimize Google Cloud Platform (GCP) infrastructure and Kubernetes (GKE) environments, ensuring scalability, availability, performance, and reliability. - Enhance the organization's observability capabilities by maintaining and improving monitoring systems using Sentry, Prometheus, Grafana, and Alertmanager. - Implement and maintain performance monitoring solutions, including k6 and similar tools, to identify bottlenecks, monitor system health, and support capacity planning. - Establish proactive monitoring and alerting mechanisms to detect operational issues early and minimize service disruptions. - Collaborate with backend engineering teams to support reliable microservices architectures, asynchronous processing, and event-driven infrastructure. - Contribute to compliance and security initiatives, supporting the implementation and maintenance of industry-recognized standards and certifications. - Identify opportunities to improve internal engineering efficiency, infrastructure reliability, security maturity, and operational processes.