Senior Security Developer
Nesto Group9 months ago
Remote, CanadaSenior
Responsibilities
- Implement and maintain security controls for cloud infrastructure and applications.
- Discover, remediate, and validate security issues across cloud infrastructure.
- Perform security-focused architecture and design reviews and provide actionable recommendations.
- Collaborate with security leadership, compliance, and engineering teams to execute security strategies.
- Build, deploy, and manage WAF, IDS/IPS, workload protection, and cloud security tools.
- Improve security and compliance controls in CI/CD pipelines and deployment processes.
- Automate infrastructure provisioning and deployment with infrastructure-as-code tools.
- Design and operate cloud access provisioning processes using least-privilege principles.
- Support incident detection and response by improving observability, alerting, and response capabilities.
- Support audits and first-party security questionnaires.
- Conduct and oversee security assessments and threat-modeling exercises.
- Implement Kubernetes security controls and build DevSecOps tools and integrations.
Requirements
- At least 5 years of experience working on infrastructure- and/or security-focused teams.
- At least 5 years of development experience, ideally with Go, TypeScript, or JavaScript.
- Knowledge of common web application vulnerabilities and the OWASP Top 10.
- Ability to analyze and act on DAST and SAST results from tools such as Tenable and Snyk.
- Experience with DevSecOps principles and CI/CD pipelines using GitHub Actions, Argo CD, or Azure DevOps for automated security testing.
- Experience deploying and customizing vulnerability scanners, static analyzers, WAFs, IDS/IPS, and endpoint security monitoring tools.
- Comprehensive knowledge of cloud and network security, including Kubernetes.
- Experience with GCP security services including Security Command Center, GKE, Cloud IDS, Cloud Armor, or Secrets Manager.
- Experience with Azure services including Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, or Key Vault.
- Experience writing infrastructure-as-code with Terraform, Pulumi, or Helm.
- Knowledge of security frameworks and benchmarks including CIS, NIST, and MITRE ATT&CK.
- Understanding of identity and access management principles and cloud-native IAM solutions.
- Experience monitoring and managing security posture through the outputs of security tooling.
- Passion for continuous learning and knowledge sharing.
- Bilingual English and French is required.
Benefits
- Premium benefits plan fully paid by nesto, including comprehensive insurance and unlimited telemedicine and mental health services for employees and their families.
- Four weeks of vacation.
- Access to the resources and technology needed to perform the role.
- Hybrid working model.
- Opportunities for accelerated growth and exposure to production systems.
Tech Stack
Categories
About Nesto Group
Nesto Group operates hypermarkets and supermarkets across the Gulf Cooperation Council, selling groceries, household goods, electronics, and apparel to retail consumers. The privately held retailer earns revenue from in-store and e-commerce sales and runs 100+ outlets across the GCC. Founded in 2004 and headquartered in Al Tawuun, Sharjah, it targets the region’s multi-ethnic communities with a broad mix of international and locally sourced products.