Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region. 

Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce.

Our brand promise - Makes Work Life Better™- Reflects our commitment to employees, customers, partners and communities globally.

About the opportunity 

We are seeking a highly motivated Cloud Security Engineer to enhance and protect our cloud environments across AWS and Azure. This role is responsible for proactively identifying cloud security risks, prioritizing findings based on real-world exploitability, and partnering with engineering teams to drive remediation. The ideal candidate brings strong hands-on experience with Wiz.io and a deep understanding of cloud-native security principles.

• Utilize Wiz.io, Microsoft Defender for Cloud (MDC) to perform continuous scanning and gain full-stack visibility across AWS and Azure environments.
• Proactively identify and analyze cloud misconfigurations, vulnerabilities, sensitive data exposure, and toxic risk combinations using the Wiz Security Graph.
• Identify and validate exploitable attack paths that could lead to infrastructure compromise or data exfiltration.
• Prioritize security findings based on contextualized risk factors such as exposure, identity permissions, data sensitivity, and blast radius rather than isolated severity scores.
• Collaborate closely with DevOps, Engineering, and Cloud Operations teams to ensure timely and effective remediation of security findings.
• Configure, customize, and maintain security policies, guardrails, alerts, and dashboards within the Wiz platform to enforce organizational security standards and CIS compliance requirements.
• Provide technical analysis and support during cloud security incidents, focusing on misconfigurations, access issues, and preventive control improvements.
• Contribute to continuous improvement of cloud security posture through automation, policy optimization, and process enhancements.

• 3+ years of overall experience in cybersecurity, cloud security, or infrastructure security roles.
• Minimum 2 years of hands-on experience securing cloud environments, with a strong focus on AWS and Azure.
• Proven experience working with Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWPP) platforms, preferably Wiz.io.
• Wiz.io Expertise: Hands-on experience deploying, configuring, and operating Wiz.io in enterprise environments.
• Cloud Platforms: Deep knowledge of AWS and Azure services, architectures, IAM, networking, and storage security.
• Misconfiguration & Risk Management: Strong ability to analyze, prioritize, and remediate cloud misconfigurations, vulnerabilities, and identity-based risks.
• Scripting & Automation: Proficiency in Python, PowerShell, or Bash to automate remediation and enforce security baselines.
• Security Fundamentals: Solid understanding of security principles, threat modeling, attack surfaces, and cloud-native security controls.Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience

• Communication: Excellent verbal and written communication skills, with the ability to explain technical security risks and remediation plans to both technical and non-technical stakeholders.

• Problem-Solving: Strong analytical and critical-thinking skills to investigate complex cloud security issues and identify root causes.
• Collaboration: Proven ability to work cross-functionally with engineering, DevOps, operations, and leadership teams to drive security initiatives and reduce organizational risk.

What would make you really stand out

• Industry certifications such as AWS Security Specialty, Azure Security Engineer Associate, CCSP, CISSP, or equivalent.
• Experience with Infrastructure as Code (Terraform, CloudFormation, Bicep).
• Familiarity with CI/CD security pipelines and Cloud-Native Application Protection Platforms (CNAPP).

What’s in it for you

Dayforce is fueled by the diversity of our talented employees. We are an equal opportunity employer and consider and embrace ALL individuals and what makes them unique. We believe our employees should be happy and healthy, with peace of mind and a sense of fulfillment.

We encourage individuals to apply based on their passions.

Dayforce encourages personal and professional growth. We offer excellent time away from work programs, comprehensive wellness initiatives and recognition through competitive pay and benefits.

With a commitment to community impact, including volunteer days and our charity, Dayforce Cares we provide opportunities for you to thrive both in your career and personal life. Our focus is not just on your job but on supporting you to be the best version of yourself. 

Fraudulent Recruiting

Beware of fraudulent recruiting. Legitimate Dayforce contacts will use an @dayforce.com email address. We do not request money, checks, equipment orders, or sensitive personal data during the recruitment process. If you have been asked for any of the above, or believe you have been contacted by someone posing as a Dayforce employee, please refer to our fraudulent recruiting statement found here: https://www.dayforce.com/be-aware-of-recruiting-fraud

Dayforce actively monitors all job applications to ensure authenticity. Submissions determined to be fraudulent or misleading will be declined from the recruitment process