Senior Cloud Security Engineer

What you will do:

• Design, implement, and continuously enhance cloud security controls, standards, and guardrails across AWS and Azure environments to protect critical business services and data.
• Partner with Cloud Engineering, Infrastructure, and project teams to embed secure-by-design principles throughout the cloud lifecycle and enable scalable, resilient solutions.
• Provide strategic security guidance on cloud architectures, emerging technologies, and platform capabilities, balancing risk management with business objectives.
• Proactively identify, assess, and remediate cloud security risks, vulnerabilities, and misconfigurations to strengthen HOOPP's overall security posture.
• Enhance cloud logging, monitoring, threat detection, and security automation capabilities to improve visibility, operational effectiveness, and response readiness.
• Conduct security assessments, risk reviews, audits, and technology evaluations, providing practical recommendations that support informed decision-making and continuous improvement.
• Collaborate with Security Operations teams to investigate security events, strengthen cloud-focused detection and response capabilities, and drive effective resolution of security issues.
• Evaluate and support the secure adoption of emerging technologies, including AI and automation solutions, identifying opportunities to improve security outcomes, streamline processes, and challenge the status quo through innovation.

What you bring:

• 7+ years of experience in information technology and cybersecurity, including securing enterprise cloud environments.
• Strong hands-on experience designing, implementing, and securing AWS environments using cloud-native security services such as Security Hub, GuardDuty, CloudTrail, AWS Config, KMS, WAF, IAM, and related capabilities.
• Experience with cloud security governance, monitoring, vulnerability management, security assessments, and continuous improvement of security posture.
• Strong understanding of cloud networking, security architecture, and secure design principles.
• Experience with Infrastructure as Code (IaC), security automation, and cloud engineering tools such as Terraform, CloudFormation, or comparable frameworks.
• Knowledge of DevSecOps practices, CI/CD security, AI technologies, and modern engineering tools, including AI-assisted development platforms, is considered an asset.
• Strong problem-solving, analytical, and critical-thinking skills, with the ability to navigate ambiguity, use data to inform recommendations, and develop practical solutions to complex challenges.
• Demonstrated ability to balance security, usability, operational requirements, cost, and business value when making recommendations and decisions.
• Proven ability to build trusted relationships, communicate effectively with technical and non-technical audiences, and collaborate across engineering, infrastructure, architecture, security, and project teams.
• Naturally curious and committed to continuous learning, with a willingness to challenge assumptions respectfully, contribute innovative ideas, take ownership, and drive improvements from concept through implementation.
• Experience securing Microsoft Azure environments is considered an asset.
• Bachelor's degree in a related field or an equivalent combination of education and practical experience.
• Professional security or cloud certifications are an asset, but not required (e.g., CISSP, CCSP, AWS Solutions Architect Associate or Professional).
• undefined)

This role is eligible to participate in discretionary incentive plan(s), subject to the terms and conditions of the applicable incentive plan text.