Senior Cloud Security Engineer — Hybrid, 4 Weeks PTO

Nesto Cloud; Canada; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Top-tier benefits

4 weeks vacation

Hybrid work model

Mental health & telemedicine

Job summary

nesto is seeking a highly skilled Cloud Security Developer to design, implement, and maintain security for our cloud-based systems and applications. You will work with development and operations teams to protect the cloud infrastructure and ensure secure deployment practices.

We value lifelong learners who can contribute to security strategy, threat modeling, and automation. The role offers a hybrid work model and a strong emphasis on security excellence across cloud environments.

Qualifications

• 5+ years on infra/security teams.
• 5+ years development experience (GoLang, TS/JS).
• Knowledge of OWASP Top 10 and security testing tools.
• Ability to analyze DAST/SAST results and translate into fixes.
• Familiar with CI/CD pipelines and automated security testing.
• Experience deploying security tools (WAF/IDS/IPS etc.).
• Strong cloud and network security with Kubernetes experience.
• GCP (Security Center, GKE, Cloud IDS/Armor, Secrets) experience.
• Azure (Security Center, App Services, VMs, Key Vault).
• IaC with Terraform/Pulumi/Helm; IAM concepts; CIS/NIST/MITRE.

Responsibilities

• Implement and maintain robust security controls for cloud infra.
• Identify, remediate, and validate security issues across cloud.
• Perform security reviews and provide actionable requirements.
• Collaborate with security, compliance, and engineering teams.
• Build and manage security tooling (WAF, IDS/IPS, etc.).
• Improve CI/CD security for pipelines and deployments.
• Automate provisioning with IaC (Terraform/Pulumi/Helm).
• Manage cloud access and least-privilege provisioning.
• Support incident detection, observability, and response.
• Contribute to DevSecOps tooling and security assessments.

Skills

Infra & security

Go/TypeScript

OWASP Top 10

DAST/SAST analysis

DevSecOps & CI/CD

Security tools deployment

Cloud security & Kubernetes

GCP services

Azure services

Terraform/Pulumi/Helm

IAM & access management

Security frameworks ( CIS, NIST, MITRE

Tools

GitHub Actions

Argo CD

Azure DevOps

Terraform

Pulumi

Helm

Cloud security tools

Job description

nesto is seeking a highly skilled Cloud Security Developer to design, implement, and maintain security for our cloud-based systems and applications. You will work with development and operations teams to protect the cloud infrastructure and ensure secure deployment practices.

We value lifelong learners who can contribute to security strategy, threat modeling, and automation. The role offers a hybrid work model and a strong emphasis on security excellence across cloud environments.