Senior Cloud Infrastructure Engineer, Security

Senior Cloud Infrastructure Engineer, Security Lightspeed Commerce is looking for a Senior Cloud Infrastructure Engineer with a focus on security to join our Security Vulnerability Management team. This role designs and implements highly secure cloud environments, champions best security practices, proactively identifies and mitigates risks, and mentors others to elevate the organization’s overall security posture. What You’ll Be Doing Work with SRE teams to design, implement, and maintain secure cloud and application infrastructure, emphasizing network segmentation, access controls, encryption, monitoring, and patch management. Develop and maintain cloud security standards aligned with industry frameworks (NIST, CIS) and cloud provider best practices. Evaluate system designs and architectures for vulnerabilities, recommending risk mitigation measures. Conduct regular risk and vulnerability assessments of cloud infrastructure, applications, and data, prioritizing findings based on severity and impact. Collaborate with cloud architects, engineers, and developers to strengthen overall security posture. Participate in incident response and remediation efforts. Research and implement security tools and automations to detect, alert, and protect against threats. Generate reports and metrics to track vulnerability trends, remediation progress, and compliance. Advocate for proactive security and threat mitigation throughout the organization. What You Need To Bring 7+ years of deep hands-on experience designing, implementing, and managing security within large-scale cloud environments (AWS, GCP, Azure, etc.). Bachelor’s degree or equivalent experience in computer science, cybersecurity, network engineering, or a similar field. Significant experience aligning systems with regulations (PCI DSS, SOC2, etc.) and conducting risk assessments. AWS Certified Security Specialty, Azure Security Engineer, Google Cloud Certified Professional Security Engineer, or equivalent. Demonstrated ability to lead cross‑functional initiatives. Experience with Application Vulnerability Management, SAST, DAST. Experience with Vulnerability Management tools such as Rapid7 InsightAppSec, Snyk, Github, Crowdstrike Falcon Cloud and Endpoint Security. Extensive knowledge of security principles, access controls (IAM), network security, encryption, vulnerability management, threat modelling, and incident response. Expertise in designing and implementing cloud security architectures. Fluency in English is required; bilingualism is a plus. What’s In It For You A growing team with autonomy and flexible work culture. Equity for all Lightspeeders and a comprehensive benefits package. Unlimited professional growth opportunities in both technical and managerial tracks. Innovation time to explore new ideas and technologies. Opportunities to shape the company through cultural and technical committees. Health insurance, pension contributions (RRSP), mental health support, paid parental leave, and a wellness stipend. Flexible paid time off, remote work policies, and a fully stocked kitchen. Regular training, volunteering days, and social events. Where to From Here? If this role aligns with your career goals, we invite you to apply through our career page. Lightspeed is committed to creating an inclusive workplace and welcomes applicants from all backgrounds. We provide accommodations for candidates with disabilities throughout the selection process. Seniority Level Mid‑Senior level Employment Type Full‑time Job Function Information Technology Industries Software Development Equal Opportunity Employer Statement Lightspeed is a proud equal opportunity employer. We are committed to creating an inclusive and barrier‑free workplace and encourage applications from people with disabilities. Accommodations are available on request for candidates in all aspects of the selection process. #J-18808-Ljbffr