DevSecOps Engineer

360insights; Whitby; On-site; CAD 93,000 - 114,000; Full time

Job summary

360insights is seeking a DevSecOps Engineer responsible for ensuring the security of user-facing services within its ecosystem. The role involves developing and securing CI/CD pipelines, implementing security controls, and automating processes related to cloud deployment and monitoring. Candidates should possess solid expertise in cloud infrastructures like AWS and Azure, coupled with a strong understanding of information security practices. Join us and be part of a company recognized for its people-first culture and inclusive work environment.

Benefits

Bonus, Equity & Benefits

Qualifications

• Expertise in cloud infrastructure architecture specific to AWS and Azure.
• Proven experience in designing and implementing cloud-based infrastructure solutions.
• Scripting capability in Python, Bash, and PowerShell.

Responsibilities

• Develop, test, and deploy integrations for security tools.
• Implement and automate security testing and vulnerability management.
• Monitor and respond to security incidents and conduct investigations.

Skills

Cloud infrastructure architecture expertise

AWS and Azure experience

Proficient with Terraform

Strong understanding of DevSecOps processes

Scripting in Python

Knowledge of security frameworks

Education

AWS Professional certifications (e.g., DevOps Engineer)

Tools

Terraform

CloudFormation

GIT

Docker

Kubernetes

Job description

Starting base salary $93,500 - $113,500 CAD*

Plus Bonus, Equity & Benefits

*Our salary ranges are determined by role, level, and location. The range reflects the typicalrange for new hire salaries, it does not reflect the maximum salary for the role over time. Individual pay offersare determined by job-related skills and experience demonstrated during the interview process.

The DevSecOps Engineers are responsible for keeping all user-facing services and other products that are part of 360insights ecosystem running securely. The DevSecOps Engineers will develop, test, and deploy integrations, implement security controls and policies, identify security design gaps, and implement cloud security standards.

What you will be doing:

• The role is highly technical, and candidates must possess a solid understanding of information security, cloud infrastructure, software, and various reference architectures,
• It is an engineering role to help support, secure, manage and deploy solutions that support 360Insights ecosystems,
• Work in close collaboration with the development and infrastructure teams to design, build, and secure the Infrastructure and Application CICD pipelines,
• Engineers embody security-first principles, constantly assess the threat landscape, and adapt quickly to manage enterprise risk, as well as infrastructure, integration, configuration, and deployment requirements,
• Create scripts and/or templates to automate and/or bootstrap infrastructure provisioning and management tasks related to security tools and services,
• Identify security design gaps in existing and proposed cloud infrastructure architectures and recommend and implement changes or enhancements,
• Implement cloud security best practices and guidelines as needed,
• Define the necessary hardening controls and cloud deployment policies,
• Implement and automate the security testing and scanning solutions and vulnerability management process,
• Validate the identified security vulnerabilities and coordinate the remediation efforts,
• Implement monitoring tools for security-related events and automate the incident detection and response processes,
• Develop, test, and deploy integrations for the company’s security tools,
• Implement security controls and policies and develop and maintain technical security documentation, network architecture diagrams, and runbooks for operating in cloud environments,
• Develop and maintain security-related scripts and tools,
• Monitor and respond to security incidents and investigate security-related issues,
• Participate in security audits and compliance assessments.

What you’ll bring to this role:

• Cloud infrastructure architecture expertise with AWS and Azure Specific skills,
• Proven experience in designing and implementing cloud-based infrastructure solutions on AWS.
• One of the following AWS certifications is an asset: AWS Professional certifications: DevOps Engineer, Solutions Architect; AWS Certified Security
• Proficient with Terraform, CloudFormation and GIT version control
• Strong understanding of DevSecOps process and governance
• Understanding of containerized compute (e.g., Docker) and container orchestration (e.g., Kubernetes)
• Experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure,
• Capable of scripting in Python, Bash and PowerShell
• Knowledge of security framework and standards such as SOC2, ISO 27001, National Institute of Standards (NIST), etc.

Why 360?

Join 360insights, a global leader in channel incentives and insights, recognized as a Great Place to Work in Canada, the USA, and the UK. We put people first, fostering an inclusive, values-driven culture where both team members and clients thrive.

We welcome individuals from all backgrounds and are committed to equal opportunity for every race, religion, ethnicity, age, disability, sexual orientation, and gender identity. Accommodations are available upon request throughout the hiring process. Learn more about our DEIB Vision on our website.

At 360insights, we believe in “Experiences that create growth. Growth that creates experiences.” Our Learning & Development programs and mentorship initiatives provide the tools and support you need to succeed and advance as an Insighter.