Senior Cloud Security Engineer

ComPsych

Senior Cloud Security Engineer securing ComPsych’s cloud-based mental health and absence-management platforms. Building cloud, application, data, AI, detection, and compliance controls.

Posted 9/3/2026full-timeRemote • 🇨🇦 CanadaSenior💰 CA$150,000 - CA$200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security posture management, identity and access management, and application security, with a strong focus on implementing security controls and compliance across AWS and Azure environments. Proficient in data protection practices, vulnerability management, and incident response, while effectively coaching teams on secure engineering practices.

Highest-signal resume keywords

Cloud Security Expertise in AWS and AzureIdentity and Access Management (IAM)Application Security Expertise (SSDLC, Threat Modeling)Vulnerability Management and Incident ResponseData Protection and Privacy Engineering

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security Posture ManagementIdentity and Access ManagementNetwork Security DesignContainer SecurityStatic and Dynamic AnalysisVulnerability ScanningPolicy as CodeData Loss Prevention (DLP)Encryption and Key ManagementThreat Modeling

Soft Skills

Excellent Organizational SkillsEffective Interpersonal SkillsProject Management SkillsSelf-StarterAbility to Multitask

Tools & Technologies

SIEMCSPMCWPPCIEMAgentic AI ToolsWeb Application FirewallsTraffic Inspection ToolsStatic Analysis ToolsDynamic Analysis ToolsPenetration Testing Tools

Certifications & Qualifications

Bachelor’s Degree in Computer Science or Related FieldHIPAA ComplianceHITRUST CertificationSOC 2 ComplianceNIST CertificationISO 27001 CertificationISO 42001 CertificationGDPR Compliance

Industry Keywords

Cloud SecurityApplication SecurityInformation SecurityAI SecurityData ResidencyPrivacy by DesignRegulated Health DataOWASP Top 10MITRE ATLASSecurity Engineering

Tech Stack

Tools & technologies

AWSAzureCloudFirewalls

About the role

Key responsibilities & impact

Own cloud security posture management across configurations, workloads, and entitlements across AWS and Azure
Implement identity and access management, least privilege, federation, SSO, secrets management, privileged access, and workload and non-human identity controls
Design network segmentation, zero-trust access, firewalls, web application firewalls, and traffic inspection across cloud and hybrid networks
Implement container security, encryption, key management, and policy-as-code guardrails
Shift application security left in CI/CD through static, dynamic, dependency, and software supply-chain scanning
Perform threat modeling and secure-by-design reviews
Lead data classification, encryption, tokenization, key management, data loss prevention, and privacy-by-design practices for PHI and ePHI
Design AI, machine-learning, and generative-AI guardrails, data protection, abuse and misuse controls, and monitoring
Tune SIEM and cloud-native detections, drive event correlation, and lead incident response
Run vulnerability scanning, coordinate penetration testing, and drive findings through remediation
Maintain security baselines, configuration compliance, controls, logging, and audit evidence
Coach engineers across teams to make secure practices the default
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s degree in Computer Science or a related field
6 to 9 years of security engineering experience is a guideline rather than a hard requirement
Hands-on cloud experience
Agentic AI tools as a primary surface for security engineering, analysis, detection, and automation
Senior-level breadth across network security, application security, cloud security, information security, and AI security, with depth in several areas
Experience building and operating controls as code, policy as code, infrastructure as code, automation, and detections in production
Experience carrying on-call and incident load
Cloud security expertise in AWS and Azure, including IAM, least privilege, federation, SSO, secrets management, privileged access, workload and non-human identities, network security, container security, key management, encryption, CSPM, CWPP, and CIEM
Data protection and privacy engineering experience, including data classification, encryption, tokenization, key management, DLP, privacy by design, regulated health data, and data residency
Application and product security expertise, including SSDLC, threat modeling, static and dynamic analysis, software composition analysis, secrets and software supply chain security, and API security
Detection, response, and vulnerability management expertise, including SIEM, cloud-native detection, log and event correlation, vulnerability scanning and management, penetration testing, and remediation
AI security awareness regarding prompt injection, data and model poisoning, and data leakage
Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS is a plus
Experience with HIPAA, HITRUST, SOC 2, NIST, ISO 27001, ISO 42001, and GDPR frameworks
Self-starter able to multitask and work autonomously
Excellent organizational and project management skills
Effective interpersonal and communication skills
Consistent and reliable high-speed internet and a distraction-free workspace
Ability to be present on camera during work-related trainings, meetings, and/or events
Ability to sit or stand at a desk for prolonged periods while working on a computer

Benefits

Comp & perks

Paid Time Off (PTO)
Medical insurance
Dental insurance
Vision insurance
401(k) with match
Robust Employee Assistance Program (EAP)
Wellness program
Full benefits package