Head of Information Security leading OpenZeppelin’s enterprise security, privacy, IT, and AI governance programs. Securing open - source infrastructure used across onchain finance and digital assets.
About the role
- Junior Cyber Security Developer building secure software and supporting cybersecurity requirements for BMO, a Canadian financial services company. Developing, testing, debugging, and maintaining technology applications.
Responsibilities
- Drive the overall software development lifecycle across functional teams
- Transform requirements into features
- Manage development teams and processes
- Conduct software testing and maintenance
- Translate user requirements into technical specifications
- Write code and manage preparation of design specifications
- Support system design
- Advise on security requirements
- Debug business systems and service applications
- Develop high-quality technology applications and services using algorithms, data structures and programming languages
- Analyze, develop, test and implement software programs
- Document the entire software development lifecycle
- Perform preventative and corrective maintenance, troubleshooting and fault rectification of system and core software components
- Ensure code and configurations meet security, logging, error-handling, performance and other non-functional standards
- Evaluate new technologies and assess upstream and downstream impacts on process, data and risk
- Follow release management processes and standards
- Apply version controls
- Assist with interpreting and documenting client requirements
- Apply risk-informed decision-making aligned with BMO's Risk Management Framework, policies, laws and regulations
Requirements
- Foundational proficiency in creative thinking
- Foundational proficiency in building and managing relationships
- Foundational proficiency in emotional agility
- Foundational proficiency in quality assurance and testing
- Foundational proficiency in cloud computing
- Foundational proficiency in microservices
- Foundational proficiency in technology business requirements definition, analysis and mapping
- Foundational proficiency in adaptability and learning agility
- Intermediate proficiency in programming
- Intermediate proficiency in applications integration
- Intermediate proficiency in test driven development
- Intermediate proficiency in system development lifecycle
- Intermediate proficiency in troubleshooting
- Intermediate proficiency in system and technology integration
- Intermediate verbal and written communication skills
- Intermediate collaboration and team skills
- Intermediate analytical and problem-solving skills
- Intermediate data-driven decision-making skills
- Typically 4–6 years of relevant experience
- Post-secondary degree in a related field of study or equivalent combination of education and experience
- Technical proficiency gained through education and/or business experience
- Knowledge of cyber security basics, including authentication, encryption and secrets
- Coding/scripting skills
- Knowledge of cloud and Linux/Windows systems
- Basic understanding of applications and APIs
- Basic understanding of operating systems, including Linux/Windows
- Basic networking knowledge, including DNS and HTTPS
- Python, PowerShell or Bash
- Ability to write simple scripts
- Ability to read and update existing code
- Familiarity with access control and authentication
- Familiarity with secrets/password protection
- Familiarity with data protection basics
Benefits
- Performance-based incentives
- Discretionary bonuses
- Health insurance
- Tuition reimbursement
- Accident insurance
- Life insurance
- Retirement savings plans
- In-depth training and coaching
- Manager support
- Network-building opportunities
- Tools and resources to reach new milestones
- Accommodations available on request for candidates taking part in all aspects of the selection process
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Red Team Security Engineer evaluating Motive's fleet - management platform and cloud environments. Executing adversary simulations, validating detection coverage, and driving remediation of security issues.
Security Specialist securing AXON Networks’ AI - driven ISP orchestration platform, cloud infrastructure and connected networking devices. Managing vulnerability scanning, CVE validation, risk prioritization and remediation.
Information Systems Security Manager securing RideCo’s cloud - based on - demand transit platform. Leading compliance, risk management, incident response, and security operations.
Staff Cyber Security Engineer securing NBCUniversal’s media, streaming, and entertainment technology. Conducting threat analysis and guiding network, application, cloud, and enterprise security controls.
Senior Security Specialist securing RBC’s cloud banking environments across AWS, Azure, and Google Cloud. Executing red/purple team exercises and refining offensive security tooling.
Senior Security Specialist operating BloodHound Enterprise for RBC, a Canadian bank. Mapping identity attack paths and prioritizing remediation across cloud, AD, DevOps, and PAM environments.
Staff Security Researcher conducting vulnerability research and penetration testing for GitLab’s AI - powered DevSecOps platform. Developing attack methodologies, tooling, and security improvements.
Principal Security Researcher securing GitLab’s AI - powered DevSecOps platform. Leading vulnerability research, AI attack analysis, penetration testing, and remediation across GitLab’s codebase.
Senior security advisor strengthening Desjardins's security posture across governance, data protection, and fraud prevention. Leading complex strategic initiatives for the Desjardins financial services organization.