Senior Infrastructure Security Engineer (CAN)

NerdWallet; Canada; Remote; CAD 100,000 - 130,000; Full time

Job summary

NerdWallet seeks a Senior Infrastructure Security Engineer to enhance its cloud security systems. The role involves building security tools and collaborating with teams to ensure data privacy and compliance. This remote position is open to candidates in Canada, focusing on proactive monitoring and risk assessment in cloud environments.

Benefits

Monthly Healthcare Stipend

Rejuvenation Policy – Vacation Time Off + Mental Health Days

Paid sabbatical

Monthly Wellness, Wifi, Cell Phone Stipends

Work from home equipment stipend

Nerd-led group initiatives – Employee Resource Groups

Hackathons and team events

Company-wide events

RRSP with a 4% match

Financial wellness guidance with a Certified Financial Planner

Qualifications

• 5+ years of infrastructure security experience.
• Strong foundation in network, host, and cloud technologies, especially AWS.
• Proficiency in Python and IaC with Terraform.

Responsibilities

• Proactively monitor cloud environments for security events.
• Define and monitor our cloud security posture.
• Respond to security incidents and implement remediation actions.

Skills

Infrastructure security

Network technologies

AWS

Python

Terraform

Kubernetes

Communication

Job description

Role Summary:

At NerdWallet, our mission is to bring clarity to all of life’s financial decisions and that starts with empowering our people. We champion an inclusive, respectful culture where every Nerd can grow, speak candidly, and be their authentic self. Whether you’re remote or in-office, we support flexibility so you can thrive in the way that works best for you. We also invest in your well-being, career development, and community impact because when you’re at your best, so are we.

NerdWallet’s Security Team keeps an eye on what’s happening inside NerdWallet and in the world to protect our consumers and the company. We are seeking a Senior Infrastructure Security Engineer who will be passionate about ensuring the privacy and integrity of our users’ sensitive information. In this role your objective will be to build core security tooling for platforms that perform the collection, computation, aggregation, and storage of personal financial data, partnering with technical teams across the company, advising them on secure design patterns for cloud and corporate infrastructure. This role will also lead strategic initiatives to remediate and mitigate infrastructure security risk across the organization.

As a Senior Infrastructure Security engineer, you will be responsible for securing NerdWallet products by identifying risks early and constantly assessing our security posture of public cloud environments. You will help drive development and implementation of automation scripts and workflows to streamline security operations to ensure consistent enforcement of security controls across all of our cloud environments.

This role will report to a Business Information Security Officer (BISO).

Where you can make an impact:

• Keep NerdWallet systems secure - proactively monitor cloud environments for security events and anomalies, such as unauthorized access attempts, data breaches, and configuration changes.

• Define and monitor our cloud security posture - assess our current cloud secure posture and ensure that we are constantly reviewing to identify and remediate any potential gaps or vulnerabilities.

• Be curious and ready to investigate - respond promptly to security incidents ready to determine root causes and implement prompt remediation actions

• Define what good looks like - identify where our areas of opportunity are and help develop and deploy best in class security controls and measures to protect our cloud-based infrastructure and services.

• Mentor junior engineers and provide guidance when needed

• Take informed risks to move the business forward, even without the full picture, acting with urgency to seize opportunities for long term risk mitigation or remediation

Your experience:

• 5+ years of infrastructure security experience in a professional environment

• A strong foundation in infrastructure security that includes network, host, and cloud technologies (specifically AWS)

• Proficiency writing Python scripts and IaC with Terraform

• The ability to write and review code

• Basic knowledge of Kubernetes

• Effective at communicating security risk impact to business leaders

Where:

• This is a remote position. Candidates can be located anywhere in Canada (with the exception of Quebec).

• NerdWallet is proud to be a remote-first company! We believe great work can be done anywhere. No matter where you are based, NerdWallet offers benefits and perks to support the physical, financial, and emotional well being of you and your family.

What we offer:

Work Hard, Stay Balanced (Life’s a series of balancing acts, eh?)

• Monthly Healthcare Stipend

• Rejuvenation Policy – Vacation Time Off + You will receive the official public holidays in your province + 4 Mental Health Days Off

• Paid sabbatical for Nerds to recharge, gain knowledge and pursue their interests

• Monthly Wellness Stipend, Wifi Stipend, and Cell Phone Stipend

• Work from home equipment stipend

Have Some Fun! (Nerds are fun, too)

• Nerd-led group initiatives – Employee Resource Groups for Parents, Diversity, and Inclusion, Women, LGBTQIA, and other communities

• Hackathons and team events across all teams and departments

• Company-wide events like NerdLove (employee appreciation) and our annual Charity Auction

Plan for your future (And when you retire on your island, remember the little people)

• RRSP with a 4% match. Eligible one month after hire.

• Financial wellness, guidance, and unlimited access to a Certified Financial Planner (CFP) through Northstar

NerdWallet is committed to pursuing and hiring a diverse workforce and is proud to be an equal opportunity employer. We prohibit discrimination and harassment on the basis of any characteristic protected by applicable federal, state, or local law, so all qualified applicants will receive consideration for employment.

#LI-Remote
#LI-4