Senior Security Incident Response Developer

Wealthsimple; Toronto; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Employer match retirement plan

Vacation days

Wellness days

Unlimited sick days

90 days away program

Job summary

Wealthsimple Inc. is seeking an experienced Senior Incident Response Developer to strengthen our Detection & Response capabilities.

You will investigate complex incidents, build scalable playbooks, and mentor the team while automating processes to protect clients and the business. You’ll lead incident response initiatives, drive improvements across SIEM and SOAR, and collaborate with Engineering, HR, Fraud, and Privacy to address threats and reduce risk.

Qualifications

• 5+ years in the Cybersecurity domain.
• 3+ years as Incident Manager, owning investigations.
• Ability to lead a team under pressure and provide direction.
• Turn noise into signals using a SIEM and related tooling.
• Experience with cloud infrastructure and automation.
• Strong communication and cross‑functional collaboration.

Responsibilities

• Advance incident response capabilities with Engineering and new playbooks.
• Mentor and grow the Incident Response team.
• Shape and build the Security Incident Response program.
• Act as Incident Commander to drive incidents to resolution.
• Convert recurring incidents into repeatable workflows and automation.
• Inform leadership on trends and metrics to guide investments.
• Partner with Security Engineering to evolve SIEM and SOAR usage.
• Coordinate with HR, Fraud and Privacy on investigations incl. insider threats.
• Participate in on‑call rotations for incidents and inquiries.
• Develop high‑fidelity detection rules from trends and threat intel.

Skills

Incident management

Incident response

Team leadership

SIEM

SOAR platforms

Automation tooling

Cloud infrastructure

Cross-functional collaboration

Tools

SIEM

SOAR

Claude Code

Cursor

ChatGPT

Job description

Build something people love

Wealthsimple is Canada’s leading financial innovator. The company offers a full suite of simple, sophisticated financial products across managed investing, do-it-yourself trading, cryptocurrency, tax filing, spending and saving. Wealthsimple currently serves more than 4 million Canadians and holds over $169 billion in assets under administration. The company was founded in 2014 by a team of financial experts and technology entrepreneurs, and is headquartered in Toronto, Canada.

We're proud of what we've built - and we're just getting started. Read our Culture Manual and learn more about how we work.

About the role

We are seeking an experienced and hands‑on security professional to join our Detection & Response team as a Senior Incident Response Developer. Reporting to the Manager of Detection & Response, this is a critical, technical role focused on strengthening our ability to respond to and recover from security threats. You will be a key player in investigating complex security incidents, building scalable response processes, and taking command when it matters most.

The ideal candidate has a deep, technical background in hands‑on incident response and a keen eye for where automation can improve and scale our capabilities. You are a natural problem‑solver who remains composed under pressure, a senior team member who enjoys mentoring others in the craft of incident response, and a builder who can create the playbooks, scripts, and processes needed to protect our company and our customers. Between incidents, you’ll build the tooling and workflows that make the next one faster and easier to handle.

What you'll do

• Help take our security incident response capabilities to the next level by building relationships with Engineering teams, new playbooks and finding opportunities for automation.

• Grow others in the art of Incident Response to support the program and increase consistency in outcomes.

• Play a key role in building and shaping the Security Incident Response team.

• Take the role of Incident Commander to bring incidents to resolution.

• Turn recurring incident types into repeatable workflows (intake, playbook, automation, closure) so they become routine work for the team.

• Help shape the direction of investment by informing the business of trends and relevant metrics.

• Partner with our Security Engineers to monitor, refine, and expand our SIEM and SOAR platforms.

• Coordinate with HR, Fraud and Privacy teams to investigate potential fraudulent and sensitive activity including insider threats and snooping.

• Participate in an on‑call rotation for responding to security incidents, internal questions and operational support.

• Partner with the detection engineering function to develop new, high‑fidelity detection rules based on incident trends and threat intelligence.

Skills you bring

• 5+ years of experience in the Cybersecurity domain.

• 3+ years experience being an Incident Manager, taking ownership of investigations.

• Ability to lead a team during high‑stress situations, providing direction and support to team members.

• Understand how to turn noise into signals using a SIEM.

• Proficiency with AI coding (Claude Code, Cursor, ChatGPT etc). We invest in tooling (automation, Slack bots, AI agents) so responders spend their energy on the decisions that matter.

• Thinks in workflows: can look at a messy, recurring problem and break it into steps that tooling or AI can take on.

• Knowledge of and familiarity with cloud infrastructure.

• Believes that honesty, transparency, and inclusivity are important when communicating with both internal and external stakeholders.

• Demonstrates good judgment under pressure both in terms of technical problem solving and collaborating cross functionally.

• Eager to learn from the team and others. We value making one another successful!

Why Wealthsimple?

Top‑tier health benefits and life insurance

Long‑term group savings with employer match, through Wealthsimple for Business

20 vacation days, 4 wellness days, and unlimited sick and mental health days per year*

90 days away: work outside Canada for up to 90 days per year*

Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS

We are a hybrid team with over 1,500 employees across North America. The people are one of the best parts of working here: you'll collaborate with incredibly talented, curious, and driven teammates who are deeply committed to doing great work.
*Unlimited paid sick days, Wellness Days and the 90 day away program do not apply to certain roles.

ICYMI

Technology & Innovation at Wealthsimple: We move quickly and build thoughtfully. That means we're always looking for better ways to work - whether that's new tools, AI, or rethinking how we approach a problem. We don't expect you to have all the answers, but we do expect curiosity and a willingness to evolve alongside the products we're building.

Inclusion Statement: We're building products for a diverse world, and we need a diverse team to do it well. We strongly encourage applications from everyone, regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status.

Accessibility Statement: We're committed to an accessible hiring experience. If you need any accommodations throughout the interview process, please let us know — we'll work with you to make sure you have what you need. We also welcome any feedback on how we can better accommodate candidates with accessibility needs.

AI in Hiring: We may use artificial intelligence (AI) tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but don't replace human judgment – all final hiring decisions are made by people. If you have questions about how your data is used, reach out to us.