1 month ago
Toronto, CanadaSenior
Responsibilities
- Harden AWS and Kubernetes environments against CIS Benchmarks, DISA STIGs, and FedRAMP Moderate baselines across a multi-account, multi-organization footprint.
- Own Kubernetes and container security, including EKS hardening, Istio security, Kubernetes RBAC, workload identity, admission control, runtime policy, and container supply-chain controls.
- Build and operate security-focused platforms, services, and automation using Python or Go, Terraform, and Kubernetes policy-as-code.
- Own PKI, certificate lifecycle management, encryption, TLS/mTLS, key management, and rotation standards.
- Design and roll out AWS Service Control Policy guardrails and least-privilege IAM/PAM across multiple accounts and organizations.
- Build and use agentic solutions for posture triage, threat modeling, risk assessment, incident investigation, compliance evidence, and detection tuning.
- Develop and tune SIEM detections for Kubernetes, Istio, and identity domains and conduct threat hunting.
- Participate in on-call rotation, triage cloud and Kubernetes alerts, act as Incident Commander, and lead containment and post-incident reviews.
- Partner with AppSec and GRC teams on platform controls, secure development, audits, and compliance evidence.
- Mentor teammates and contribute to technical roadmaps, annual planning, and cross-team communication.
Requirements
- At least 5 years of security engineering experience.
- Strong software engineering experience building and operating production systems and security-focused platforms, services, and tooling.
- Proficiency in Python and/or Go or similar programming languages and Infrastructure as Code using Terraform.
- Deep hands-on experience securing Kubernetes and containerized environments, including EKS, Kubernetes RBAC, admission control, network policy, workload identity, container security, and Istio or another service mesh.
- Deep expertise with AWS security services and least-privilege IAM/PAM, including IAM, Organizations, SCPs, Secrets Manager, KMS, GuardDuty, CloudTrail, and Config.
- Experience automating security controls as code, contributing to modern SIEM detection strategy, and performing threat hunting.
- Experience with incident response and on-call operations, plus ownership of ambiguous security projects through completion.
- Preferred experience with PKI, cryptography, TLS/mTLS, certificate management, encryption, and HSM/KMS-backed key management.
- Preferred experience with CIS Benchmarks, DISA STIGs, FedRAMP, NIST CSF, SOC 2, ISO 27001, and compliance evidence.
- Preferred experience building agentic or AI-assisted security automation and securing AI/ML or agentic workloads.
- Familiarity with Wiz, CrowdStrike Falcon, Azure security, Entra ID, Defender for Cloud, and PagerDuty's Incident Management and Process Automation products is preferred.
- Demonstrated mentoring, written and verbal communication, and cross-functional collaboration skills.
Benefits
- Hybrid work arrangement requiring two days per week in the Toronto, Ontario office.
- Base salary range of 156,800–206,800 CAD, with potential eligibility for bonus, commission, equity, and benefits.
- Comprehensive benefits, flexible work arrangements, company equity, ESPP, retirement or pension plan, paid vacation, holidays, and sick leave.
- Paid parental leave, paid volunteer time off, wellness programs, mental wellness programs, and companywide paid days off.
- Company-wide hack weeks.
About PagerDuty
PagerDuty builds a subscription SaaS platform for incident response, on‑call management, AIOps, and workflow automation used by DevOps, IT, SRE, security, and support teams. Its cloud service centralizes alerts, orchestrates real-time response, and integrates with monitoring and ticketing tools. Founded in 2009 and headquartered in San Francisco, the public company (NYSE: PD) counts 60 of the Fortune 100 among its customers, including Netflix and Cisco.