Senior Security Developer
Nesto Cloud7 months ago
Remote, CanadaSenior
Responsibilities
- Implement and maintain security controls for cloud infrastructure and applications.
- Discover, remediate, and validate security issues across cloud infrastructure.
- Perform security-focused architecture and design reviews and provide actionable recommendations.
- Deploy and manage security tools including WAF, IDS/IPS, workload protection, GCP Security Command Center, and Azure Security Center.
- Improve security and compliance controls in CI/CD pipelines and deployment processes.
- Automate infrastructure provisioning and deployments using Infrastructure as Code tools such as Terraform and Pulumi.
- Design and operate cloud access-provisioning processes based on least-privilege principles.
- Support incident detection and response by improving observability and alerting.
- Support audits, first-party security questionnaires, security assessments, and threat-modeling exercises.
- Implement security controls within Kubernetes and build DevSecOps tools and integrations.
Requirements
- At least 5 years of experience working on infrastructure and/or security teams.
- At least 5 years of development experience, ideally with Go, TypeScript, or JavaScript.
- Knowledge of common web application vulnerabilities and the OWASP Top 10.
- Ability to analyze and act on DAST and SAST results from tools such as Tenable and Snyk.
- Experience with DevSecOps principles and CI/CD pipelines using GitHub Actions, Argo CD, or Azure DevOps.
- Experience deploying and customizing vulnerability scanners, static analyzers, WAFs, IDS/IPS, and endpoint security monitoring tools.
- Strong understanding of cloud security, network security, and Kubernetes.
- Experience with GCP services including Security Command Center, GKE, Cloud IDS, Cloud Armor, or Secrets Manager.
- Experience with Azure services including Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, or Key Vault.
- Experience writing Infrastructure as Code with Terraform, Pulumi, and Helm.
- Knowledge of CIS, NIST, and MITRE ATT&CK security frameworks and benchmarks.
- Understanding of IAM principles and cloud-native IAM solutions.
- Experience monitoring and managing security posture through security-tool outputs.
- Bilingual English and French communication skills.
Benefits
- Hybrid work model.
- Fully paid premium benefits plan with comprehensive insurance.
- Unlimited access to telemedicine and mental health services for employees and their families.
- Four weeks of vacation.
- Access to the resources and technology needed to perform the role.
Tech Stack
Categories
About Nesto Cloud
Nesto Cloud builds a cloud-native, end-to-end mortgage technology platform for banks, credit unions, and commercial real estate lenders, combining automation, proprietary intelligence, and BPO services. It sells B2B software and outsourced operations that support the full lending lifecycle with real-time compliance and integrations. Headquartered in Montreal, it operates within the Nesto Group alongside CMLS Financial, which reports over $73B CAD in mortgages under management across 12 Canadian offices.