Senior Security Engineer - Cloud Security
Toronto · Atlanta · 5+ years experience · Hybrid · Posted Sep 29, 2026
At a glance
- Experience
- 5+ years experience
- Workplace
- Hybrid
- Location
- Toronto · Atlanta
About PagerDuty
- PagerDuty, Inc. (NYSE:PD) is a global leader in digital operations management. The PagerDuty Operations Cloud is an AI-powered platform that empowers business resilience and drives operational efficiency for enterprises. With a generative AI assistant at its core, PagerDuty empowers teams to detect and resolve issues in real time, orchestrate complex workflows, and drive continuous improvement across their digital operations. Trusted by nearly half of both the Fortune 500 and the Forbes AI 50, as well as approximately two-thirds of the Fortune 100, PagerDuty is essential for delivering always-on digital experiences to modern businesses
- PagerDuty is Great Place to Work-certified™, a Fortune Best Workplace for Millennials, a Fortune Best Medium Workplace, a Fortune Best Workplace in Technology, and a top rated product on TrustRadius and G2.
- Go behind-the-scenes on our careers site and @pagerduty on Instagram.
- Additional Information
- PagerDuty is an equal opportunity employer. PagerDuty does not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, parental status, veteran status, or disability status. Your privacy is important to us. By submitting an application, you confirm that you have read and understand PagerDuty's Privacy Policy.
- PagerDuty is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application process. Should you require accommodation, please email accommodation@pagerduty.com and we will work with you to meet your accessibility needs.
About the role
- PagerDuty is seeking a Senior Security Engineer to join the Cloud Security team within Security Engineering under the CTO organization.
- This is a preventive, platform-focused role to build and operate security-focused systems at scale for a multi-account AWS environment and its Kubernetes platforms.
- The role entails container security, identity and access management, shaping detection strategy, and participating in an on-call rotation.
Responsibilities
- Harden PagerDuty's AWS and Kubernetes environments against CIS Benchmarks, DISA STIGs, and FedRAMP Moderate (Class C) baselines across a multi-account, multi-org footprint.
- Own Kubernetes and container security end to end, including EKS clusters, Istio service mesh, RBAC, workload identity, and container supply chain controls.
- Build and operate security-focused platforms, services, and automation at scale using Python/Go, Terraform, and Kubernetes policy-as-code.
- Own PKI and encryption standards across the environment, including certificate lifecycle, KMS-backed key management, TLS/mTLS, and encryption-at-rest and in-transit requirements.
- Design and roll out Service Control Policy (SCP) guardrails and least-privilege IAM/PAM across dozens of accounts and multiple orgs.
- Use and build lightweight agentic solutions that streamline security tasks such as posture triage, threat modeling, risk assessment, and incident investigation.
- Shape detection strategy for Kubernetes/Istio and identity, authoring and tuning detections in the SIEM stack and threat hunting for container and identity abuse.
- Participate in the team's on-call rotation, triaging threat alerts and acting as Incident Commander during incidents.
- Partner closely with AppSec and GRC teams to align platform controls with secure-development needs and produce audit and compliance evidence.
- Mentor and guide teammates on platform, identity, and cryptography security practices, and contribute to roadmap and annual planning.
Requirements
- Strong software engineering background building and operating production systems at scale with proficiency in Python and/or Go (or similar) and Infrastructure as Code (Terraform).
- 5+ years in security engineering with deep, hands-on expertise securing Kubernetes and containerized environments.
- Deep expertise with AWS security services and least-privilege IAM/PAM.
- Ability to automate security controls as code and inform detection strategy in a modern SIEM, including threat hunting.
- Experience with incident response and on-call, a builder's mindset toward AI/agentic tooling, and a track record of scoping ambiguous projects.
Preferred qualifications
- Hands-on expertise in PKI and cryptography, certificate lifecycle/management, TLS/mTLS, key management and rotation.
- Hands-on hardening to CIS Benchmarks and DISA STIGs within a FedRAMP program, familiarity with NIST CSF, SOC 2, or ISO 27001.
- Experience building agentic or AI-assisted security automation and familiarity with securing AI/ML or agentic workloads.
- Cloud-native security tooling such as Wiz and CrowdStrike Falcon runtime protection, with Azure security exposure as a plus.
- Demonstrated mentoring, strong communication skills, and working knowledge of PagerDuty's Incident Management and Process Automation products.
Benefits
- Competitive salary
- Comprehensive benefits package
- Flexible work arrangements
- Company equity
- ESPP (Employee Stock Purchase Program)
- Retirement or pension plan
- Generous paid vacation time
- Paid holidays and sick leave
- Dutonian Wellness Days & HibernationDuty
- Paid parental leave
Workplace
- This role will be require to work 2 days week from our Toronto, Ontario office
- PagerDuty operates a hybrid work model
Skills
- Python
- Go
- Terraform
- Kubernetes
- AWS
- Istio
- PKI
- IAM
- SIEM
- CrowdStrike
- Splunk
- Wiz
