DevSecOps Specialist

Socket.dev; Montreal (administrative region); Hybrid; CAD 90,000 - 140,000; Full time

Job summary

Socket.dev is seeking a DevOps security engineer to join our hybrid team in Montreal with in-office attendance. You will design and maintain security roadmaps, address vulnerabilities, and implement tools across AWS, Azure, GCP, and on-prem environments.

You will collaborate with Engineering, Operations, and Compliance to enforce security standards, automate controls, and contribute to data security analytics. A degree in CS/Engineering or Data Science is required.

Qualifications

• 3 - 5 years of experience working as DevOps, Cloud Engineer or Architect working with AWS, Azure and GCP.
• 1-3 years of experience managing and security infrastructure as code (IAC).
• Bachelor’s degree in Computer Science/Engineering, IT or Data Science.
• Solid experience securing and managing applications on Kubernetes.
• Experience scripting and parsing information in Python/BASH/GoLang.
• Solid understanding of scalability patterns applied to infrastructure architecture for high traffic systems.
• Good understanding of continuous integration and continuous delivery models and best practices.
• Excellent communication and time management skills.
• A love for making things efficient and reliable.

Responsibilities

• Help create and maintain a tactical security roadmap, initiatives, and improvements.
• Proactively identify security gaps and vulnerabilities within the infrastructure and develop plans to address them.
• Help develop security standards and guidelines.
• Develop & implement security tools, controls and automation for both cloud (AWS, Azure, GCP) and on-premises.
• Performing in-depth security architecture reviews and assessments.
• Work closely with various teams to implement security measures and ensure consistent application of security policies.
• Govern and Implement security controls through Infrastructure as Code (IaC).
• Help develop and maintain our internal security analytics and data platform.
• Build data pipelines for ingesting posture and event information.
• Maintain comprehensive documentation of security configurations, policies, and procedures.
• Provide regular reports on security posture and KPIs.

Skills

Communication skills

Time management

Initiative

Team collaboration

Problem solving

Attention to detail

Education

Bachelor's degree in Computer Science/Engineering, IT or Data Science

Tools

AWS

Azure

GCP

Kubernetes

GitLab

Python

Bash

Go

Job description

Established in 2004, we are a tech pioneer offering world-class adult entertainment and games on some of the internet’s safest and most popular platforms. With the support of an international team of dynamic and collaborative innovators, we are on a mission to enable safe user experiences and empower our communities by celebrating diversity, inclusion, and expression — all while maintaining robust trust-and-safety protocols.

We embrace the best of both worlds! Local talent can thrive in our collaborative office space with the flexibility of a hybrid work environment, while remote team members play an integral role in shaping our dynamic culture from afar. We have offices in Montreal (Quebec), Austin (Texas) and Nicosia (Cyprus).

A select number of positions require full-time in office attendance

What You'll Be Doing:

• Help create and maintain a tactical security roadmap, initiatives, and improvements.
• Proactively identify security gaps and vulnerabilities within the infrastructure and develop plans to address them.
• Help develop security standards and guidelines.
• Develop & implement security tools, controls and automation for both cloud (AWS, Azure, GCP) and on-premises.
• Performing in-depth security architecture reviews and assessments.
• Work closely with various teams (e.g., Engineering, Operations, Compliance) to implement security measures and ensure consistent application of security policies.
• Govern and Implement security controls through Infrastructure as Code (IaC).
• Help develop and maintain our internal security analytics and data platform.
• Build data pipelines for ingesting posture and event information.
• Maintain comprehensive documentation of security configurations, policies, and procedures.
• Provide regular reports on security posture and key performance indicators (KPIs).

What you’ll need to be successful:

Must Haves:

• 3 - 5 years of experience working as DevOps, Cloud Engineer or Architect working with AWS, Azure and GCP.
• 1-3 years of experience managing and security infrastructure as code (IAC).
• Bachelor’s degree in Computer Science/Engineering, IT or Data Science.
• Solid experience securing and managing applications on Kubernetes.
• Experience scripting and parsing information in Python/BASH/GoLang.
• Solid understanding of scalability patterns applied to infrastructure architecture for high traffic systems.
• Good understanding of continuous integration and continuous delivery models and best practices.
• Excellent communication and time management skills.
• A love for making things efficient and reliable.

Nice To Haves

• Experience with data engineering and concepts such as ETL and Data Modeling.
• Experience with Gitlab.
• Industry Certifications (Security/DevOps/Data Analytics).
• Professional context switcher.
• Proactive and adept at taking initiative.

As an equal opportunity employer, we celebrate diversity and are committed to creating an inclusive environment for all employees

In this role you may be exposed to adult content