Cloud Security Developer

🔥 0 minutes ago

🇨🇦 Canada – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

nesto

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2018

💼 Consulting

🛡️ Insurance

💳 Fintech

💰 $80M Series C - Nesto on 2022-12

Consulting • Insurance • Fintech

nesto is a Canadian online mortgage lender and brokerage that provides mortgages, renewals, refinances and HELOCs through an AI-powered, technology-first platform. The company offers rate comparisons, calculators, educational guides and access to licensed mortgage advisors across provinces, emphasizing low upfront rates, streamlined digital applications, and transparent mortgage advice for consumers. nesto combines digital tools with in-house mortgage experts to simplify home financing for Canadian borrowers.

📋 Description

• Design, implement, and maintain cloud security solutions to protect cloud-based systems and applications. • Implement and maintain robust security controls for cloud infrastructure and applications. • Identify, remediate, and validate security issues across the cloud infrastructure. • Conduct architecture and design reviews from a security perspective and provide actionable requirements and recommendations. • Collaborate with security leadership, compliance, development, and engineering teams to execute security strategies. • Build, deploy, and manage security tools such as WAFs, IDS/IPS, workload protection, GCP Security Command Center, and Azure Security Center. • Propose and contribute to security and compliance improvements for CI/CD pipelines and deployment processes. • Automate infrastructure provisioning and deployment using IaC tools such as Terraform or Pulumi. • Design and operate scalable processes for provisioning cloud access and maintaining the principle of least privilege. • Participate in incident detection and response by improving observability and alerting and supporting the incident response team. • Self-organize and independently prioritize activities. • Support audits and first-party security questionnaires. • Lead and oversee security assessments and threat modeling exercises. • Implement security controls within Kubernetes. • Build DevSecOps tools and integrations.

🎯 Requirements

• 5+ years of experience working on an infrastructure- and/or security-focused team. • 5+ years of development experience, ideally with Go and TypeScript/JavaScript. • Knowledge of common web application vulnerabilities and the OWASP Top 10 framework. • Ability to analyze and act on DAST and SAST tool results (e.g., Tenable, Snyk). • Strong understanding of DevSecOps principles and familiarity with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps) for conducting automated security testing. • Experience deploying and customizing security tools, including vulnerability scanners, static analyzers, web application firewalls (WAFs), intrusion detection/prevention systems (IDS/IPS), and endpoint security monitoring. • In-depth understanding of cloud and network security, including extensive knowledge of Kubernetes. • Experience with GCP, specifically one or more of the following services: Security Command Center, GKE, Cloud IDS, Cloud Armor, and Secret Manager. • Experience with Azure, specifically one or more of the following services: Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault. • Experience writing infrastructure as code using tools such as Terraform, Pulumi, and Helm. • Knowledge of common security frameworks and benchmarks such as CIS, NIST, and MITRE ATT&CK. • Understanding of identity and access management (IAM) principles and cloud-native IAM solutions. • Passion for continuous learning and knowledge sharing. • Bilingual in English and French.

🏖️ Benefits

• Employee mortgage program: exclusive preferred rates. • Comprehensive health coverage: premium extended coverage (health, dental, and vision), with 100% prescription drug coverage. • Access to a group RRSP/DPSP retirement savings plan with competitive employer matching contributions. • Telemedicine and family support, including supplemental maternity and parental leave programs. • Flexible workplace: fully remote or from one of our offices (Montreal, Quebec City, Toronto, and more).