Senior Cloud Infrastructure Engineer, Security

Hi there! Thanks for stopping by 👋

Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place!

The Senior Cloud Infrastructure Engineer, Security serves as a critical member of the Security Vulnerability Management team, designing and assisting in the implementation of highly secure cloud environments. They champion security best practices, proactively identify and mitigate risks, vulnerabilities, security related misconfigurations and help guide the organization in aligning security with business goals. This role collaborates extensively with various teams, assists in incident response, and mentors others to elevate the organization's overall security posture.

What you’ll be doing:

• Work with SRE teams to design, implement, and maintain secure cloud and application infrastructure, emphasizing network segmentation, access controls, encryption, monitoring, and patch management.
• Develop and maintain cloud security standards aligned with industry frameworks (NIST, CIS) and cloud provider best practices.
• Evaluate system designs and architectures for vulnerabilities, recommending risk mitigation measures.
• Conduct regular risk and vulnerability assessments of cloud infrastructure, applications, and data, and prioritize findings based on severity and impact.
• Collaborate with cloud architects, engineers, and developers to strengthen overall security posture.
• Participate in incident response and remediation efforts.
• Research and implement security tools and automations to detect, alert, and protect against threats.
• Generate reports and metrics to track vulnerability trends, remediation progress, and compliance.
• Advocate for proactive security and threat mitigation throughout the organization.

What you need to bring:

• 7+ years of deep hands-on experience designing, implementing, and managing security within large-scale cloud environments (AWS, GCP, Azure, etc.).
• Bachelor's degree or equivalent experience in computer science, cybersecurity, network engineering, or a similar field.
• Significant experience aligning systems with regulations (PCI DSS, SOC2, etc.) and conducting risk assessments.
• AWS Certified Security Specialty, Azure Security Engineer, Google Cloud Certified Professional Security Engineer, or equivalent. 
• Demonstrated ability to lead cross-functional initiatives.
• Experience with Application Vulnerability Management, SAST, DAST.
• Experience with Vulnerability Management tools such as Rapid7 InsightAppSec,  Snyk, Github, Crowdstrike Falcon Cloud and Endpoint Security. 
• Extensive knowledge of security principles, access controls (IAM), network security, encryption, vulnerability management, threat modelling, and incident response.
• Expertise in designing and implementing cloud security architectures.
• As a global company with employees and clients outside of Quebec, fluency in English as a working language is required for this position.

What’s in it for you:

• Join a growing team and help us move to the next level
• Amazing benefits & perks, including equity for all Lightspeeders
• Constant development of both your skill-set and business acumen with limitless growth opportunities
• Lots of autonomy, flexible work culture
• Innovation time to explore and learn at work
• Shaping the company by joining cultural & technical committees
• Tons of growth opportunities into technical or people management roles
• Opportunity to join a fast-paced, high-growth company
• Opportunity to learn, expand your skill set, forge wonderful relationships and make your mark within the diverse and inclusive Lightspeed family, a true Canadian tech success story

….  And enjoy a range of benefits that will keep you happy, healthy and (not) hungry.

• Lightspeed equity scheme (we are all owners).
• Flexible paid time off and remote work policies.
• Health insurance.
• Contributions to your pension plan - RRSP.
• Health and wellness benefit of $500 per year.
• Paid leave and assistance for new parents.
• Mental health online platform and counseling & coaching services.
• Training opportunities to grow your skills and career
• Volunteer day.
• Fully stacked kitchen (hot and cold beverages, meals served) 
• Happy hours to build your relationships with colleagues after work

To all recruitment agencies: Lightspeed does not accept unsolicited agency resumes. If we have not directly engaged your company in writing to supply candidates for a specific vacancy, Lightspeed will not be responsible for any fees related to unsolicited resumes.

Lightspeed is a proud equal opportunity employer and we are committed to creating an inclusive and barrier-free workplace. Lightspeed welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

Where to from here?
Obviously, this has to be mutually beneficial: we want you to step into a role you love, and we want to offer you a place you’re proud to come to every day. For a glimpse into our world check out our career page here.

Lightspeed is building communities through commerce, and we need people from all backgrounds and lived experiences to do that. We were founded in 2005, in Montreal’s gay village and our original members were all part of the LGBTQ+ community. The ethos of our business has been about inclusion from the very beginning, and we strive to provide a workplace where everyone belongs.

Who we are:
Powering the businesses that are the backbone of the global economy, Lightspeed's one-stop commerce platform helps merchants innovate to simplify, scale, and provide exceptional customer experiences. Our cloud commerce solution transforms and unifies online and physical operations, multichannel sales, expansion to new locations, global payments, financial solutions, and connection to supplier networks.