Senior Security Developer
Nesto Group7 months ago
Remote, CanadaSenior
Responsibilities
- Implement and maintain security controls for cloud infrastructure and applications.
- Discover, remediate, and validate security issues across cloud infrastructure.
- Conduct security-focused architecture and design reviews and provide actionable recommendations.
- Collaborate with security leadership, compliance, engineering, and operations teams on security strategies.
- Build, deploy, and manage WAF, IDS/IPS, workload protection, GCP Command Center, and Azure Security Center tools.
- Improve security and compliance in CI/CD pipelines and deployment processes.
- Automate infrastructure provisioning and deployment with Infrastructure as Code tools such as Terraform and Pulumi.
- Design and operate cloud access provisioning processes based on least-privilege principles.
- Support incident detection and response by improving observability and alerting.
- Support audits and first-party security questionnaires.
- Conduct and oversee security assessments and threat modeling exercises.
- Implement security controls within Kubernetes and build DevSecOps tools and integrations.
Requirements
- At least 5 years of experience working on infrastructure and/or security teams.
- At least 5 years of development experience, ideally with GoLang and TypeScript/JavaScript.
- Knowledge of common web application vulnerabilities and the OWASP Top 10.
- Ability to analyze and act on DAST and SAST results from tools such as Tenable and Snyk.
- Experience with DevSecOps principles and CI/CD pipelines using GitHub Actions, Argo CD, or Azure DevOps for automated security testing.
- Experience deploying and customizing vulnerability scanners, static analyzers, WAFs, IDS/IPS, and endpoint security monitoring tools.
- Strong knowledge of cloud and network security, including Kubernetes.
- Experience with GCP security services such as Security Command Center, GKE, Cloud IDS, Cloud Armor, and Secrets Manager.
- Experience with Azure services such as Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault.
- Experience writing Infrastructure as Code with Terraform, Pulumi, and Helm.
- Knowledge of CIS, NIST, and MITRE ATT&CK security frameworks and benchmarks.
- Understanding of IAM principles and cloud-native IAM solutions.
- Experience monitoring and managing security posture outputs from security tooling.
- Passion for continuous learning and knowledge sharing.
- Bilingual proficiency in English and French.
Benefits
- Premium benefits plan fully paid by nesto, including comprehensive insurance and unlimited telemedicine and mental health services for the employee and family.
- Four weeks of vacation.
- Access to the tools and resources needed to perform the role.
- Hybrid work model.
- Collaborative and diverse working environment.
Tech Stack
Categories
About Nesto Group
Nesto Group operates hypermarkets and supermarkets across the Gulf Cooperation Council, selling groceries, household goods, electronics, and apparel to retail consumers. The privately held retailer earns revenue from in-store and e-commerce sales and runs 100+ outlets across the GCC. Founded in 2004 and headquartered in Al Tawuun, Sharjah, it targets the region’s multi-ethnic communities with a broad mix of international and locally sourced products.