Cloud Security Engineer – DevSecOps (Hybrid)

nesto; Canada; Hybrid; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Premium benefits plan

Telemedicine & mental health

4 weeks vacation

Hybrid work model

Top-tier tools

Job summary

nesto in Canada is seeking a Cloud Security Developer to design, implement, and maintain cloud security for our cloud-based systems and applications. You will collaborate with developers and operations to ensure security and integrity of infrastructure.

We value lifelong learners and diverse experience; you will help advance security posture, CI/CD integration, and DevSecOps practices in a hybrid work environment.

Qualifications

• 5+ years of experience on infrastructure and/or security teams.
• 5+ years of development experience (GoLang, TypeScript/JS).
• Knowledge of OWASP Top 10 and security testing results.
• Experience with CI/CD pipelines and automated security testing.
• Experience deploying security tools (WAF/IDS/IPS, scanners).
• Strong cloud security and Kubernetes understanding.
• Experience with GCP and Azure security services.
• Proficient in Terraform, Pulumi, and Helm for IaC.

Responsibilities

• Implement and maintain robust security controls across cloud infra and apps.
• Remediate and validate security issues in cloud environments.
• Perform security reviews and provide actionable requirements.
• Collaborate with security, compliance, and engineering teams.
• Build and manage security tooling (WAF, IDS/IPS, workload protection, etc).
• Contribute to CI/CD security improvements in pipelines.
• Automate provisioning with IaC tools (Terraform/Pulumi).
• Design scalable processes for least-privilege access.
• Support security audits and questionnaires.
• Lead threat modeling and security assessments.
• Implement security controls within Kubernetes.
• Develop DevSecOps integrations.

Skills

GoLang

TypeScript/JS

OWASP Top 10

DAST/SAST analysis

CI/CD pipelines

Vulnerability scanners

Kubernetes security

GCP security

Azure security

Terraform/Pulumi/Helm

IAM & cloud IAM

Bilingual (English/French)

Tools

Terraform

Pulumi

Helm

GitHub Actions

Argo CD

Azure DevOps

Tenable

Snyk

WAF

IDS/IPS

Job description

nesto in Canada is seeking a Cloud Security Developer to design, implement, and maintain cloud security for our cloud-based systems and applications. You will collaborate with developers and operations to ensure security and integrity of infrastructure.

We value lifelong learners and diverse experience; you will help advance security posture, CI/CD integration, and DevSecOps practices in a hybrid work environment.