Want to know if this job is worth applying to?
Canada
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an AWS Security Specialist based in Canada.
This is an opportunity for an experienced cloud security professional to strengthen and evolve the security infrastructure of a global, fully remote technology environment. You will take ownership of AWS security architecture, helping protect critical cloud services, containerized workloads, and sensitive data. Working closely with operations, DevOps, and enterprise security teams, you will translate compliance requirements into practical, automated security controls. The role combines hands-on technical implementation with threat modeling, monitoring, and incident response. You will help embed security into infrastructure and development processes while supporting a rapidly expanding organization. Mandarin communication skills are essential for effective collaboration across the distributed team.
Design and implement defense-in-depth security architecture across AWS environments.
Strengthen VPC network security through Security Groups, Network Access Control Lists (NACLs), PrivateLink, and secure connectivity configurations.
Implement and maintain least-privilege IAM controls and data encryption strategies.
Own the security of Amazon EKS environments, including infrastructure hardening, Kubernetes Network Policies, and IAM Roles for Service Accounts (IRSA).
Establish and maintain container image scanning workflows and improve container security practices.
Build real-time security monitoring, logging, and alerting systems using CloudWatch, CloudTrail, GuardDuty, and Security Hub.
Participate in security incident response, investigate potential threats, and coordinate remediation activities.
Serve as the technical point of contact between operations teams and the central enterprise security function.
Translate security policies, ISO 27001 and SOC 2 requirements, and internal audit findings into actionable technical architecture and engineering controls.
Conduct threat modeling, identify architectural vulnerabilities, and drive security remediation across teams.
Champion Security as Code practices by automating infrastructure compliance, auditing, and remediation through Terraform or CloudFormation.
3–5+ years of hands-on AWS experience, with a strong understanding of the AWS Shared Responsibility Model.
Advanced knowledge of Kubernetes and Amazon EKS security operations, including storage security, runtime protection, and container network isolation.
Deep understanding of AWS VPC architecture, including hybrid cloud connectivity through Transit Gateway and VPN, as well as CDN and WAF deployment.
Proficiency with CloudWatch for log analysis, metrics monitoring, and automated alerting.
Strong scripting skills in at least one of Python, Go, or Bash, with the ability to develop automation scripts for security and operations tasks.
Experience working with security, compliance, or audit teams, and the ability to translate regulatory and compliance requirements into engineering solutions.
Ability to independently perform threat modeling and identify security risks in system architecture.
Strong technical documentation, problem-solving, and cross-functional communication skills.
Mandarin communication ability for daily collaboration and meetings, along with English reading and writing proficiency.
Nice to have:
AWS Certified Security – Specialty certification.
Certified Kubernetes Security Specialist (CKS) certification.
DevSecOps implementation experience, including integrating security tools into CI/CD pipelines, such as Snyk, Prisma Cloud, or Trivy.
Experience with Infrastructure as Code tools such as Terraform or AWS CDK.
Previous experience in cryptocurrency exchanges, Web3, or related industries.
An operations or DevOps engineering background, particularly experience transitioning from infrastructure or operations into cloud security.
Monthly compensation of USD 4,000–6,000, paid over 13 months.
Additional performance-based bonus.
Permanent, full-time employment.
Fully remote working arrangement, with no specific time-zone restriction.
Opportunity to contribute to the security infrastructure of a global organization operating across multiple regions.
