Cloud Security Developer

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

nesto

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2018

💼 Consulting

🛡️ Insurance

💳 Fintech

Consulting • Insurance • Fintech

nesto is a Canadian online mortgage lender and brokerage that provides consumer mortgages, renewals, refinancing, and HELOC products across provinces. The company uses technology — including an AI-powered algorithm — to deliver low-rate comparisons, a streamlined digital application experience, educational guides and mortgage calculators, and access to licensed mortgage advisors. nesto targets homebuyers and homeowners with transparent, tech-enabled mortgage services and content.

📋 Description

• Design, implement and maintain cloud security solutions to protect cloud-based systems and applications • Implement and maintain robust security controls for cloud infrastructure and applications • Discover, remediate and validate security issues across the cloud infrastructure • Conduct architecture and design reviews from a security perspective and provide actionable requirements and recommendations • Collaborate with security leadership, compliance and engineering teams to execute security strategies • Build, deploy and manage security tools such as WAF, IDS/IPS, workload protection, GCP Security Command Center and Azure Security Center • Propose and contribute to security and compliance improvements for CI/CD pipelines and deployment processes • Automate infrastructure provisioning and deployment with IaC tools like Terraform or Pulumi • Design and operate scalable processes for provisioning cloud access and upholding the principle of least privilege • Participate in detection and incident response processes by improving observability and alerting • Support first-party security audits and questionnaires • Lead and oversee security assessments and threat-modeling exercises • Implement security controls within Kubernetes • Build DevSecOps tools and integrations • Self-organize and prioritize activities autonomously

🎯 Requirements

• 5+ years of experience on an infrastructure- and/or security-focused team • 5+ years of development experience, ideally with Go (GoLang) and TypeScript/JavaScript • Knowledge of common web application vulnerabilities and the OWASP Top 10 framework • Ability to analyze and act on results from DAST and SAST tools, including Tenable and Snyk • Strong grasp of DevSecOps principles and familiarity with CI/CD pipelines, including GitHub Actions, Argo CD and Azure DevOps • Experience deploying and customizing security tools: vulnerability scanners, static analyzers, WAF, IDS/IPS and endpoint security monitoring • Deep understanding of cloud and network security, including Kubernetes • Experience with GCP and one or more services such as Security Command Center, GKE, Cloud IDS, Cloud Armor and Secrets Manager • Experience with Azure and one or more services such as Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door and Key Vault • Experience writing infrastructure-as-code with Terraform, Pulumi and Helm • Familiarity with security frameworks and benchmarks such as CIS, NIST and MITRE ATT&CK • Understanding of IAM principles and cloud-native IAM solutions • Passion for continuous learning and knowledge sharing • Bilingual (English and French)

🏖️ Benefits

• Employee mortgage program: exclusive preferred rates • Comprehensive health coverage: top-tier extended coverage (health, dental, vision) with 100% drug coverage • Access to a group retirement savings plan (RRSP/RPP) with competitive employer matching contributions • Telemedicine and family support (top-up programs for maternity/parental leave) • Flexible workplace: fully remote or at one of our offices (Montréal, Québec City, Toronto, etc.)