Cloud Security Developer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Design, implement, and maintain security solutions for cloud environments to safeguard cloud-based systems and applications.

• Establish and uphold strong security measures for cloud infrastructure and applications.

• Identify, address, and validate security vulnerabilities within the cloud infrastructure.

• Conduct architectural and design reviews with a security focus and offer actionable requirements and recommendations.

• Collaborate with security leadership, compliance, and engineering teams to implement security strategies effectively.

• Develop, deploy, and manage security tools such as WAF, IDS/IPS, workload protection, GCP Security Command Center, and Azure Security Center.

• Suggest and enhance security and compliance practices for CI/CD pipelines and deployment workflows.

• Automate infrastructure provisioning and deployment using Infrastructure as Code (IaC) tools like Terraform or Pulumi.

• Design and manage scalable processes for granting cloud access while adhering to the principle of least privilege.

• Engage in detection and incident response efforts by enhancing observability and alerting mechanisms.

• Assist in first-party security audits and complete questionnaires.

• Lead and conduct security assessments and threat modeling activities.

• Implement security measures within Kubernetes environments.

• Develop DevSecOps tools and facilitate integrations.

• Organize and prioritize tasks independently.

⛳️ Requirements

• Over 5 years of experience in an infrastructure and/or security-oriented team.

• More than 5 years of development experience, preferably with Go (GoLang) and TypeScript/JavaScript.

• Familiarity with common web application vulnerabilities and the OWASP Top 10 framework.

• Capability to analyze and respond to results from DAST and SAST tools, including Tenable and Snyk.

• Strong understanding of DevSecOps principles and experience with CI/CD pipelines, including GitHub Actions, Argo CD, and Azure DevOps.

• Proven experience in deploying and customizing security tools: vulnerability scanners, static analyzers, WAF, IDS/IPS, and endpoint security monitoring.

• In-depth knowledge of cloud and network security, specifically within Kubernetes.

• Experience with GCP and various services such as Security Command Center, GKE, Cloud IDS, Cloud Armor, and Secrets Manager.

• Familiarity with Azure and related services like Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault.

• Proficient in writing infrastructure-as-code with Terraform, Pulumi, and Helm.

• Understanding of security frameworks and benchmarks such as CIS, NIST, and MITRE ATT&CK.

• Knowledge of IAM principles and cloud-native IAM solutions.

• Enthusiasm for continuous learning and sharing knowledge.

• Bilingual proficiency in English and French.

🏝️ Benefits

• Employee mortgage program offering exclusive preferred rates.

• Comprehensive health benefits with top-tier extended coverage (health, dental, vision) including 100% drug coverage.

• Access to a group retirement savings plan (RRSP/RPP) featuring competitive employer matching contributions.

• Telemedicine services and family support, including top-up programs for maternity and parental leave.

• Flexible work environment: fully remote options or at one of our offices (Montréal, Québec City, Toronto, etc.).