Senior Infrastructure Security Engineer

Join Clio, a rapidly growing security team, as a Senior Infrastructure Security Engineer. In this role, you will implement and maintain security controls across AWS/Azure, secure Kubernetes workloads, and investigate potential security incidents. You will have the opportunity to make a tangible impact and work in a small team. Benefits include specialized learning and development programs, equitable compensation, company equity, flexible paid time off, parental leave options, and various health benefits.

• Implement and maintain security controls across AWS/Azure, focusing on EKS/AKS cluster security, EC2 hardening, and cloud-native protection.
• Develop and tune rules for cloud-specific threats, manage GuardDuty/Defender integration, and build automated response workflows.
• Investigate potential security incidents and serve as initial incident responder, providing architectural guidance for securing user environments.
• This role is for someone passionate about building proactive security solutions, implementing detection capabilities, and driving security automation at scale
• If so, we have a spot for you on Clio’s security team
• We are looking for the right candidate to develop and run our security architecture and engineering program, and be an advocate and advisor for security overall
• Are you someone who’s always probing and asking why, someone who enjoys finding smarter and more efficient solutions to problems
• If you have a strong operations background with a passion for security and experience in cloud-first environments, then we want to talk to you
• Strong understanding of threat vectors, indicators of compromise, malicious behaviour identification, and emerging threat analysis
• Demonstrate a keen interest in improving your craft by using AI
• Hands-on expertise with Kubernetes and/or EKS, including autoscaling, CI/CD, and automation
• Strong Linux experience
• Cloud Security expertise with 3+ years in securing AWS environments
• Adept at using IaC technologies like Terraform, Puppet, CloudFormation, or Ansible
• Ability to program in a dynamic programming language: Python, Ruby
• Familiarity in a cloud-first organization, including experience with AWS and/or GCP
• Skilled in securing cloud infrastructure such as AWS, GCP/GSuite, GitHub, and IdP
• Strong Azure and/or GCP security experience to go with your AWS Experience
• Any security certifications such as AWS Security Specialist, OSCP, CKS, GCPN, CISSP or others
• Experience with Ruby on Rails, Puppet, Terraform, ELK (Elastic/OpenSearch, Logstash and Kibana)
• Infrastructure security (firewalls, ACLs, authentication, device hardening)
• Container Security Tools familiarity with Falco, OPA/Gatekeeper, container image scanning, and runtime protection