Find work in Canada.

323,755 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 10 days ago
Staff DevSecOps Specialist
AlayaCare
Montreal, QC
…misconfiguration become impossible rather than detected, and, with Developer Experience, CI/CD security testing (SAST, SCA, secrets, container scanning) enforced at a signal-to-noise bar…
Added 10 days ago
Engineering Manager - Helix Virtualization Platform
Aptiv
Ottawa, ON · ON
Full-time
…Critical AI Systems, with the most exacting standards for safety, security, performance, and reliability. Success will be determined by our ability to innovate with velocity and deliver at…
Added 10 days ago
Cloud Infrastructure & DevSecOps Engineer
InfoTrack Canada
Toronto, ON
Full-time
As the Cloud Infrastructure and DevSecOps Engineer, you will own the end-to-end cloud infrastructure and deployment pipeline for InfoTrack Canada. You will unblock critical environment…
Added 13 days ago
Principal Application Security Specialist
Global Relay
Vancouver, BC
The Principal Application Security Specialist is the most senior individual contributor across Global Relay's Software & Application Security function. Combining deep application security…
Added 13 days ago
Principal Application Security Specialist
Global Relay
Vancouver, BC
Full-time
The Principal Application Security Specialist is the most senior individual contributor across Global Relay's Software & Application Security function. Combining deep application security…
Added 14 days ago
Staff Technical Lead – AI & Platform
Royal Bank of Canada
Toronto, ON
Full-time
…practices that improve delivery velocity, software quality, and developer…
Added 14 days ago
Sr. Security Service Manager, Application Security
CIBC
Toronto, ON
Full-time
You can demonstrate experience in Application Security, Vulnerability Management, and data security standards and best practices. You bring senior-level experience in application security,…
Added 14 days ago
Senior Solution Architect - Digital
Intact FC
Montreal, QC · Laval, QC
Full-time
…architecture challenges, including high availability architectures, security improvements, and the eventual migration of workloads to AWS. Candidates should be comfortable working across a…
Added 13 days ago
Senior Technical Business Systems Analyst
J&M Group
Toronto, ON
Full-time
Understanding of CI/CD pipelines, DevSecOps processes, security controls, and vulnerability management workflows.
Added 14 days ago
Lead Product Engineer (Global Security)
Royal Bank of Canada
Toronto, ON
Full-time
Define AppSec Strategy – Own the AppSec roadmap for DevSecOps and Security Controls, prioritizing initiatives that deliver measurable value to development teams
Added 15 days ago
Lead Product Engineer (Global Security)
RBC
Toronto, ON
Full-time
Define AppSec Strategy – Own the AppSec roadmap for DevSecOps and Security Controls, prioritizing initiatives that deliver measurable value to development teams
Added 15 days ago
Test Automation Senior Manager (SDET)
Accenture
Ottawa, ON · Toronto, ON · Montreal, QC
Full-time
Proven experience integrating testing into DevSecOps pipelines (CI/CD, version control, artifact management)
Added 14 days ago
Senior DevOps Engineer - Cloud Operations
Black Duck
Calgary, AB
Full-time
…productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in…
Added 15 days ago
Software Engineer, Security
Cohere
Remote, Canada
Full-time · Remote
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
Added 3 months ago
Senior Cybersecurity and Compliance Analyst - Landmark
Halliburton
Calgary, AB
…oil and gas operators worldwide - hold us to a high bar on security and compliance, whether they run our software in their own data centers or subscribe to it as a SaaS platform. You will…
Added 14 days ago
Senior Data Engineer, Temporary
Aviso Wealth
Remote, Canada
Temporary · Remote
…for designing, building, and collaborating with Development, Security, and TSP Ops teams to deploy data and software products both on-premise and in the…
Added 14 days ago
Senior Data Engineer, Temporary
Aviso Wealth
Remote, Canada
Temporary · Remote
…for designing, building, and collaborating with Development, Security, and TSP Ops teams to deploy data and software products both on-premise and in the…
Added 14 days ago
DevOps Engineer
Caspian One
Toronto, ON
$80 to $110 CAD / hour
Contract
As a DevSecOps Engineer, you will play a critical role in designing and maintaining the CI/CD
Added 14 days ago
Senior Platform Engineering Specialist
CANARIE
Ottawa, ON
Full-time
To strengthen the security of Canada’s research and education sector, we collaborate with our partners in the NREN, government, academia, and the private sector to fund, implement, and…
Added 15 days ago
Senior Security Developer
nesto
Canada
Full-time
We are looking for a Senior Security Developer to join our dynamic team. In this role, you will play a critical role in designing, implementing, and maintaining cloud security solutions to…
Added 15 days ago
Senior Security Developer
nesto
Canada
Full-time
We are looking for a Cloud Security Developer to join our dynamic team. In this role, you will play a critical role in designing, implementing, and maintaining cloud security solutions to…
Added 15 days ago
Site Reliability Engineer
Redwood Software
ON
$125,000 to $145,000 CAD / year
Design, secure, and troubleshoot AWS cloud network architecture, including VPCs, subnetting, routing, security groups/NACLs, load balancers (ALB/NLB), and VPN/Transit Gateway connectivity…
Added 16 days ago
Senior Full-Stack Software Engineer
Manulife
Toronto, ON
Full-time
Apply modern engineering practices including CI/CD, DevSecOps, automation, testing, and semantic versioning.
Added 15 days ago
Cloud Engineer DevSecOps
Valtech
Montreal, QC
As aCloud Engineer- DevSecOps you are passionate about experience innovation and eager to push the boundaries of what’s possible. You bring 5 YEARS of experience, a growth mindset and a…
Added 15 days ago
Security & AI DevSecOps Expert (Hybrid)
Ateko, backed by Bell Canada
Toronto, ON
Contract
We are looking for a highly hands-on Application Security Expert who combines the skills of a Security Architect and a DevSecOps Specialist. This individual will play a key role in…

nesto

Senior Security Developer

Canada

Job type: Full-time
Posting language: English
Posted: Sep 16, 2026

Apply About employer

Applications open in a new tab.

Original job description

Our mission is to provide a positive, empowering, and transparent property financing experience that is simple from start to finish. Our team consists of skilled technology experts, caring mortgage specialists, and a diverse marketing team, all working together to lead change in the mortgage industry.

At nesto, we're proud of

Our clients love our positive, empowering, and transparent mortgage financing experience.
Our 4.5-star Google reviews speak for themselves!
We won the 2023 & 2024 CLA Lender of the Year award, recognizing our excellence in lending services.
We are a B Corp certified organization, highlighting our dedication to making a positive impact on our society and our planet.
Our highly skilled, diverse, and collaborative team, makes everything possible!
Our Mortgage Cloud platform gives financial institutions full access to nesto’s proprietary technology, powering a better client experience, from start to finish.

About The Team

We're a fast-paced, interdisciplinary team working on multiple tech projects simultaneously. Our team is diverse and works on different products and nesto experiences that are all interconnected.

We are looking for a Cloud Security Developer to join our dynamic team. In this role, you will play a critical role in designing, implementing, and maintaining cloud security solutions to protect our cloud-based systems and applications. You will work closely with our development and operations teams to ensure the security and integrity of our cloud infrastructure.

We celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences.

What You'll Be Doing

Implement and maintain robust security controls to protect our cloud infrastructure and applications.
Discover, remediate, and validate security issues across cloud infrastructure.
Perform architectural/design reviews through a security lens and provide timely, actionable requirements and recommendations.
Collaborate with security leadership, compliance, and engineering teams to execute security strategies.
Build, deploy, and manage security tools such as WAF, IDS/IPS, workload protection, GCP Command Center, and Azure Security Center, etc.
Propose and contribute to security and compliance improvements for nesto CI/CD pipelines and deployment processes.
Automate infrastructure provisioning and deployment processes using Infrastructure as Code (IaC) tools like Terraform or Pulumi.
Design and operate scalable processes to provision cloud access and maintain least privilege.
Participate in and support the incident detection and response process by enhancing observability and alerting and assisting the incident response team.
Self-organize and prioritize activities independently.
Support audits and first-party security questionnaires.
Conduct and oversee security assessments and threat modeling exercises.
Implement security controls within Kubernetes.
Build DevSecOps tools/integrations.

Who We're Looking For

5+ years of experience working on a team focused on infrastructure and/or security.
5+ years of development experience (ideally GoLang, TypeScript/JS).
Knowledge of common web application vulnerabilities and the OWASP Top 10 framework.
The ability to analyze and act on results from DAST and SAST tools (e.g., Tenable, Snyk).
Skilled in DevSecOps principles and familiarity with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps) to perform automated security testing.
Experience deploying and customizing security tools to address threats and lower risk, including vulnerability scanners, static analyzers, web application firewalls (WAFs), intrusion detection/prevention systems (IDS/IPS), and endpoint security monitoring.
A comprehensive grasp of cloud and network security, including an in-depth understanding of Kubernetes.
Experience in GCP specifically with one or more of the following services: Security Command Center, GKE, Cloud IDS, Cloud Armor, and Secrets Manager.
Experience in Azure specifically with one or more of the following services: Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault.
Experience writing infrastructure-as-code using tooling such as Terraform, Pulumi, and Helm.
Knowledge of common security-related frameworks and benchmarks like CIS, NIST, and MITRE ATT&CK.
An understanding of identity and access management (IAM) principles and cloud-native IAM solutions.
Passionate about constant learning and sharing knowledge with others.
Bilingual (English & French).

We definitely want to talk to you if you have/are

Experience managing security posture by collating, digesting, and monitoring outputs from tooling.
Experience working with infrastructure-as-code using tooling such as Terraform, Pulumi, and Helm.
Skilled in DevSecOps principles and familiar with CI/CD (Github Action and Argo CD) pipelines to perform automated security testing

The Reward

The A-Team: Work alongside high-performing talent in the industry.
Accelerated Growth: The slope of your learning curve here will be vertical. You will touch more production systems in one year than you would in five years at a bank.
Top-Tier Coverage: Premium benefits plan fully paid by nesto, including comprehensive insurance and unlimited access to telemedicine and mental health services for you and your family.
Rest & Recharge: 4 weeks of vacation to ensure you stay at peak performance.
Best-in-Class Tools: Access to the resources and tech you need to execute without friction.
Working framework: The environment that makes you productive and enables teamwork (Hybrid model).

Diversity and Inclusion

At nesto, we believe that creativity and collaboration are the result of a diverse team. We are committed to fostering a culture of diversity, equity, inclusion, and belonging, and we strongly encourage women, people of color, LGBTQIA+ individuals, and individuals with disabilities to apply. We are committed to creating a workplace that is inclusive and welcoming to all.

#nestocloud

Apply About employer

More about this job

Responsibilities

You will design, implement, and maintain cloud security solutions while collaborating with engineering teams to protect infrastructure. Additionally, you will automate security processes, perform threat modeling, and manage security tools across GCP and Azure environments.

Requirements

Candidates must have at least 5 years of experience in infrastructure or security and proficiency in development languages like GoLang or TypeScript. A strong understanding of cloud security, Kubernetes, and DevSecOps principles is required, along with bilingual proficiency in English and French.

Skills

Cloud security
GoLang
TypeScript
JavaScript
Kubernetes
Terraform
Pulumi
DevSecOps
CI/CD
GCP
Azure
OWASP Top 10
Infrastructure as Code
Vulnerability management
Threat modeling
Identity and access management

Benefits

Premium benefits plan
Comprehensive insurance
Unlimited access to telemedicine
Mental health services
4 weeks of vacation

Visa sponsorship

Not detected in the job text

Keywords

Cloud Security
GoLang
TypeScript
JavaScript
Kubernetes
Terraform
Pulumi
DevSecOps
CI/CD
GCP
Azure
OWASP
Infrastructure as Code
Vulnerability Scanning
Threat Modeling
IAM
WAF
IDS/IPS
GitHub Actions
Argo CD
Azure DevOps
Snyk
Tenable
CIS
NIST
MITRE ATT&CK
Bilingual
Cloud Infrastructure
Security Assessment
Observability

Report this job