Security director at Intact, an insurer, protecting customer and broker digital channels and third - party risk platforms. Leading technical teams, governance, strategy, and security operations.
About the role
- Cloud Security Developer at nesto designing and maintaining cloud security solutions. Collaborating with teams to ensure security and integrity of cloud infrastructure.
Responsibilities
- Implement and maintain robust security controls to protect our cloud infrastructure and applications.
- Discover, remediate, and validate security issues across cloud infrastructure.
- Perform architectural/design reviews through a security lens and provide timely, actionable requirements and recommendations.
- Collaborate with security leadership, compliance, and engineering teams to execute security strategies.
- Build, deploy, and manage security tools such as WAF, IDS/IPS, workload protection, GCP Command Center, and Azure Security Center, etc.
- Propose and contribute to security and compliance improvements for nesto CI/CD pipelines and deployment processes.
- Automate infrastructure provisioning and deployment processes using Infrastructure as Code (IaC) tools like Terraform or Pulumi.
- Design and operate scalable processes to provision cloud access and maintain least privilege.
- Participate in and support the incident detection and response process by enhancing observability and alerting and assisting the incident response team.
- Self-organize and prioritize activities independently.
- Support audits and first-party security questionnaires.
- Conduct and oversee security assessments and threat modeling exercises.
- Implement security controls within Kubernetes.
- Build DevSecOps tools/integrations.
Requirements
- 5+ years of experience working on a team focused on infrastructure and/or security.
- 5+ years of development experience (ideally GoLang, TypeScript/JS).
- Knowledge of common web application vulnerabilities and the OWASP Top 10 framework.
- The ability to analyze and act on results from DAST and SAST tools (e.g., Tenable, Snyk).
- Skilled in DevSecOps principles and familiarity with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps) to perform automated security testing.
- Experience deploying and customizing security tools to address threats and lower risk, including vulnerability scanners, static analyzers, web application firewalls (WAFs), intrusion detection/prevention systems (IDS/IPS), and endpoint security monitoring.
- A comprehensive grasp of cloud and network security, including an in-depth understanding of Kubernetes.
- Experience in GCP specifically with one or more of the following services: Security Command Center, GKE, Cloud IDS, Cloud Armor, and Secrets Manager.
- Experience in Azure specifically with one or more of the following services: Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault.
- Experience writing infrastructure-as-code using tooling such as Terraform, Pulumi, and Helm.
- Knowledge of common security-related frameworks and benchmarks like CIS, NIST, and MITRE ATT&CK.
- An understanding of identity and access management (IAM) principles and cloud-native IAM solutions.
- Passionate about constant learning and sharing knowledge with others.
- Bilingual (English & French).
Benefits
- Premium benefits plan fully paid by nesto, including comprehensive insurance and unlimited access to telemedicine and mental health services for you and your family.
- 4 weeks of vacation to ensure you stay at peak performance.
- Access to the resources and tech you need to execute without friction.
- The environment that makes you productive and enables teamwork (Hybrid model).
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Security Advisor strengthening Intact Insurance’s cyber - defense detection engineering. Building cloud security, threat detection, and scalable security solutions.
Information Security Advisor conducting cyber - risk assessments and contract reviews for Sun Life, a global financial - services company. Advising business and technology teams on security controls, compliance, and risk remediation.
Enterprise Security Architect securing technology for Vancity, a member - owned Canadian credit union. Designing enterprise application security frameworks, controls, and risk - based cybersecurity solutions.
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.