Cloud Security Engineer (DevSecOps)

nesto; Canada; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Premium benefits

4 weeks vacation

Hybrid work model

Mental health support

Telemedicine access

Job summary

nesto is expanding its Cloud Security team and seeks a developer to design, implement, and maintain cloud security for our cloud-native platforms. You’ll work with development and operations to ensure security and integrity of our cloud infrastructure, applying best practices across Kubernetes, IAM, and CI/CD.

You will collaborate with security leadership and engineering to implement robust controls and drive security improvements across GCP and Azure environments, while contributing to threat

Qualifications

• 5+ years in infrastructure and/or security on a team.
• 5+ years of development experience (GoLang, TS/JS).
• Knowledge of OWASP Top 10 and common web app vulnerabilities.
• Ability to act on DAST/SAST results (Tenable, Snyk).
• DevSecOps mindset with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps).
• Experience deploying security tools: WAF, IDS/IPS, endpoint security.
• Strong cloud and network security understanding, incl. Kubernetes.
• Experience with GCP (Security Command Center, GKE, Cloud IDS/Armor/Secrets) and Azure (Security Center, App Services, VMs, Key Vault).
• Infrastructure-as-code using Terraform, Pulumi, Helm.
• Familiar with CIS, NIST, MITRE ATT&CK frameworks and IAM concepts.

Responsibilities

• Implement and maintain robust security controls for cloud infra and apps.
• Discover, remediate, and validate security issues across cloud environments.
• Perform security reviews of architecture/design and provide actionable guidance.
• Collaborate with security leadership, compliance, and engineering teams.
• Build and manage security tooling (WAF, IDS/IPS, workload protection, Cloud Center tooling).
• Improve CI/CD security for pipelines and deployment processes.
• Automate infrastructure provisioning with IaC (Terraform, Pulumi).
• Design scalable access provisioning with least privilege principles.
• Support incident detection, observability, and incident response activities.
• Contribute to audits and security questionnaires; conduct threat modeling.
• Implement security controls in Kubernetes; develop DevSecOps integrations.

Skills

Cloud security

GoLang

TypeScript/JS

DevSecOps

CI/CD

OWASP Top 10

DAST/SAST

Kubernetes

GCP

Azure

Terraform

Pulumi

Helm

CIS/NIST/ATT&CK

IAM

Tools

Terraform

Pulumi

Helm

Snyk

Tenable

Job description

nesto is expanding its Cloud Security team and seeks a developer to design, implement, and maintain cloud security for our cloud-native platforms. You’ll work with development and operations to ensure security and integrity of our cloud infrastructure, applying best practices across Kubernetes, IAM, and CI/CD.

You will collaborate with security leadership and engineering to implement robust controls and drive security improvements across GCP and Azure environments, while contributing to threat