Senior Infrastructure Security Developer

October 12

Apply Now

Receive Emails with Similar Jobs

Wealthsimple

WebsiteLinkedInAll Job Openings

wealth manager • financial advisor • investment manager • portfolio manager • investment adivsor

501 - 1000

💰 Private Equity Round on 2021-05

Description

• Your career is an investment that grows over time! • Wealthsimple is on a mission to help everyone achieve financial freedom by reimagining what it means to manage your money. • Using smart technology, we take financial services that are often confusing, opaque and expensive and make them transparent and low-cost for everyone. • We’re the largest fintech company in Canada, with over 4 million users who trust us with more than $50 billion in assets. • Our teams ship often and make an impact with groundbreaking ideas. • We're looking for talented people who keep it simple and value collaboration and humility as we continue to create inclusive and high-performing teams where people can be inspired to do their best work. • About the Infrastructure Security Team: The Infrastructure Security team is a specialized group with a mix of security, cloud infrastructure, networking endpoint, and scripting skillsets who work together to deploy and manage a wide variety of tools and processes to ensure Wealthsimple's systems and data are secure. • We manage a variety of Wealthsimple's security stack such as endpoint detection and response, cloud security posture management, securing edge and internal networks, mobile device management, and security and infrastructure operations for the tools that support these functions.

Requirements

• Develop and implement comprehensive infrastructure security strategies, including reviewing and improving network architecture, system configurations, and security policies to safeguard the organizations' assets while continuously testing our security posture • Collaborate with cross-functional teams to design and implement security controls and threat detections • Own the full lifecycle of security alerting, including building and managing logging and monitoring resources, and continuously improving alert accuracy and efficiency • Architect, secure, and maintain infrastructure as code using tools like Terraform, Terragrunt, and Atlantis, resolving cloud misconfigurations and implementing security best practices • Stay up-to-date with the latest security technologies, trends, and best practices, and make recommendations for their implementation • Deep understanding of cloud security frameworks and tools, including AWS services (EKS, VPC, Network Firewall) and management of Cloud Security Posture Management (CSPM) and Cloud Native Application Protection Platform (CNAPP) tools • Strong understanding of Kubernetes security concepts and architecture, including RBAC, network policies, and policies as code, with experience in endpoint detection and response across various platforms (MacOS, iOS, Android, and Kubernetes) • Experience securing edge networks by tuning web application firewalls and rate limiting controls • Knowledge of security frameworks such as CIS, SOC2, PCI, and/or NIST • An inquisitive mindset: you have the desire to learn new skills, the ability to ask questions, and remain open to new ideas and perspectives • Flexibility and creativity; you enjoy coming up with innovative ways to solve problems, work through constraints and own the implementation of the solutions • Excellent communication skills with the ability to articulate security best practices and strategies to diverse stakeholders, thriving in a transparent, debate-and-feedback-driven team environment • Mentoring fellow peers through pairing, code review, and in-the-moment feedback

Benefits

• Competitive salary with top-tier health benefits and life insurance • Retirement savings matching plan using Wealthsimple Work • 20 vacation days per year and unlimited sick and mental health days • Up to $1,500 per year towards wellness and professional development budgets respectively • 90 days away program: Employees can work internationally in eligible countries for up to 90 days per calendar year • A wide variety of peer and company-led Employee Resource Groups (ie. Rainbow, Women of Wealthsimple, Black @ WS) • Company-wide wellness days off scheduled throughout the year