Senior Security Specialist - Cloud Red Team(Global Security)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Specialist – Cloud Red Team (Global Security) based in Canada.
We are seeking an experienced cloud security professional to strengthen the security and resilience of complex public cloud environments. In this role, you will conduct hands‑on Red Team and Purple Team exercises to identify vulnerabilities, simulate realistic attack scenarios, and improve defensive capabilities. You will work across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP), helping assess and secure critical production systems. Collaborating with cloud security, operations, threat intelligence, and incident response specialists, you will contribute to the evolution of offensive security tools and techniques. You will also translate complex attack paths and technical findings into actionable recommendations for technical teams and business stakeholders. This opportunity offers exposure to sophisticated cloud infrastructure, collaboration with skilled cybersecurity experts, and dedicated support for continuous professional development.
Accountabilities:
Assess public cloud security: Evaluate and improve the security posture of cloud environments across AWS, Microsoft Azure, and Google Cloud Platform, identifying weaknesses and recommending practical remediation strategies.
Execute Red Team and Purple Team exercises: Participate in hands‑on security assessments within mature production environments, simulating attack techniques and working with defensive teams to strengthen detection and response capabilities.
Develop offensive security capabilities: Contribute to the development, refinement, and maintenance of offensive security tooling, automation, and tradecraft to improve testing effectiveness.
Automate cloud security operations: Use cloud APIs, command‑line interfaces, and scripting to support security testing, automate operational tasks, and assess cloud configurations.
Collaborate with security and operations teams: Partner with Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, Security Operations Center, Incident Response, and machine learning and AI analytics teams to deliver meaningful security improvements.
Analyze vulnerabilities and attack paths: Investigate complex security events, identify potential exploitation paths, assess operational risks, and provide clear, actionable recommendations.
Communicate security findings: Explain technical vulnerabilities, attack scenarios, incidents, and emerging trends to cloud operations teams, internal customers, security professionals, business stakeholders, and management.
Support cloud infrastructure security: Assess architectures, configurations, deployment pipelines, networking, patching, high availability, and other controls that influence the security and reliability of cloud‑hosted services.
Promote continuous security improvement: Work collaboratively with technical and defensive teams to improve security practices, strengthen organizational resilience, and evolve assessment methodologies.
Requirements:
Cloud platform expertise: Strong hands‑on experience managing and building systems or platforms on at least one major public cloud provider: AWS, Microsoft Azure, or Google Cloud Platform.
Cloud architecture and DevOps: Good understanding of modern cloud‑centric architectures, DevOps principles, and the operational practices required to maintain secure and reliable cloud environments.
Scripting and automation: Experience automating operational activities using cloud APIs, command‑line interfaces, and scripting tools.
Infrastructure as code and orchestration: Intermediate experience with configuration management and orchestration tools such as Ansible or Puppet, infrastructure‑as‑code platforms such as Terraform or CloudFormation, and CI/CD tools such as Jenkins.
Cloud service operations: Understanding of PaaS and SaaS environments, including service‑level agreements, load balancing, high availability, operating system patching, networking, and security management.
Operating systems and technical foundations: Strong technical understanding of Linux and Windows environments, along with relevant hardware and software platforms.
Security communication: Ability to explain complex technical concepts, vulnerabilities, and attack paths in clear, accessible language for both technical and non‑technical audiences.
Cybersecurity experience: Experience in cybersecurity is an advantage, particularly three or more years of experience conducting network‑layer or application‑layer penetration testing.
Security certifications: Relevant information security or cloud certifications in AWS, Azure, or GCP are considered an asset.
Kubernetes knowledge: Experience operating Kubernetes environments and understanding multi‑tenancy and its security implications is desirable.
Analytical and investigative skills: Ability to assess complex security events, interpret vulnerability findings, evaluate risk, and develop effective solutions.
Leadership and collaboration: Strong decision‑making, problem‑solving, communication, and relationship‑building skills, with the ability to collaborate across teams and influence security improvements.
Growth‑oriented mindset: Demonstrated initiative, attention to detail, a commitment to continuous learning, and the ability to set ambitious goals and perform effectively in challenging environments.
Benefits:
Competitive compensation: Salaried compensation with a comprehensive total rewards program, including bonuses and competitive benefits.
Flexible benefits: Access to a flexible benefits program designed to support a range of employee needs.
Potential additional rewards: Commissions and stock‑related compensation may be available where applicable.
Dedicated training budget: Annual funding for professional training and industry conference attendance.
Professional development: Access to industry‑leading public and private training opportunities to deepen cloud security and offensive security expertise.
Leadership support: Coaching, training, and development opportunities supported by leaders invested in employee growth.
Collaborative environment: Work alongside experienced offensive security specialists and cross‑functional cybersecurity teams in a dynamic, high‑performing environment.
Flexible work arrangements: Hybrid and remote‑work flexibility, with options designed to support work‑life balance.
Career progression: Opportunities to take on greater responsibilities, expand technical expertise, and advance professionally.
Meaningful impact: Contribute to protecting critical cloud environments and strengthening cybersecurity capabilities in complex, business‑critical systems.
Inclusive workplace culture: A commitment to collaboration, respect, diverse perspectives, and an environment where employees are supported in their professional development.
#J-18808-Ljbffr