Cloud Security Engineer

You will work as part of a team assessing and improving the security of RBC's public cloud environments (Amazon Web Services, Microsoft Azure, and Google Cloud Platform). Responsibilities: Participate in hands-on execution of Red and Purple Team Exercises in mature production environments. Assist in developing, evolving, and refining offensive tradecraft and tooling. Forge partnerships with defensive teams such as Cloud Security, Cloud Operations, Threat Hunting, Threat Intelligence, SOC / IR, and ATO ML/AI analytics team to drive pragmatic cyber security improvement. Effectively liaise and communicate with the cloud operations group, internal customers, security operations center, key business stakeholders, and management regarding information security incident events and trends. Requirements: Experience in scripting/automating operations via various cloud APIs or CLIs. A good understanding of modern, cloud-centric architectures and DevOps principles. Strong experience managing cloud platforms: Amazon Web Services, Microsoft Azure, or Google Cloud Platform. Strong experience building systems and/or platforms using Amazon Web Services, Microsoft Azure, or Google Cloud Platform. Intermediate experience working with orchestration and configuration management systems such as Ansible or Puppet, and infrastructure-as-code systems such as CloudFormation or Terraform, and CI/CD tools such as Jenkins. A background in PaaS/SaaS environment practices, including: maintaining SLAs, load-balancing, high availability, operating system patching, networking, and security management/patching. Strong technical understanding in a variety of hardware and software platforms (Linux & Windows). The ability to communicate complicated technical concepts or attack paths which compromise operations in a form that is easily digestible by a broader audience who may not be technical. Nice-to-Have: Certifications in information security, AWS, Azure, or GCP. Experience with running Kubernetes environments and understanding of multi-tenancy and security implications. 3+ years of Cyber Security experience with background executing network/application layer penetration tests. Ability to analyze complex security and vulnerability events. Benefits: A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable. Dedicated budget for annual training and conference attendance. Leaders who support development through coaching, training, and managing opportunities. Ability to make a difference and lasting impact. Work in a dynamic, collaborative, progressive, and high-performing team. Flexible work/life balance options including a hybrid-remote working environment. Opportunities to do challenging work. Opportunities to take on progressively greater accountabilities. Opportunities to build close relationships with various cyber security teams. Job Data by YubHub .