Intermediate Software Developer, Application Security

2 months ago


Moose Jaw, Canada Wealthsimple Full time
Intermediate Software Developer, Application Security

Wealthsimple is the simple way to grow your money like the world's most sophisticated investors. No-maintenance portfolios, expert investment advisers, and low fees.

Your career is an investment that grows over time Wealthsimple is on a mission to help everyone achieve financial freedom by reimagining what it means to manage your money. Using smart technology, we take financial services that are often confusing, opaque, and expensive and make them transparent and low-cost for everyone. We’re the largest fintech company in Canada, with over 3 million users who trust us with more than $40 billion in assets.

Our teams ship often and make an impact with groundbreaking ideas. We're looking for talented people who keep it simple and value collaboration and humility as we continue to create inclusive and high-performing teams where people can be inspired to do their best work.

About the Application Security and Posture Management team:

At Wealthsimple, we value our customers' trust above all. Our Application Security Team is dedicated to protecting this trust by ensuring the utmost security of our applications and customer data. In close collaboration with development teams, we integrate security measures and practices into every stage of our Software Development Lifecycle. We also partner with them to build secure features and capabilities into our products. Our proactive efforts are focused on identifying and mitigating risks within our applications, ensuring solutions are both timely and scalable.

Our mission extends beyond securing systems; we aim to safeguard our customers' trust, reinforcing Wealthsimple's position as the most trusted company in the world. We also cultivate a strong security culture throughout the company, empowering all employees to uphold and advocate for our high security standards.

What you will do:
  • Audit source code and perform code reviews for critical application changes.
  • Develop and maintain custom security libraries, tools, and services such as geolocator, panko, security-bot, Input Sanitization middleware to mitigate Injection based attacks; and GraphQL API Security controls.
  • Integrate tooling used for automated security scanning, including Semgrep for SAST, SCA, and Secrets Detection; and Nuclei.
  • Lead bug bounty efforts and provide hands-on guidance for vulnerability remediation and train developers on common security pitfalls, fostering a proactive security culture within the development process.
  • Implement data pipeline to aggregate data from security tools and build monitors and detection to alert us of potential compromise.
  • Design and implement attack scenarios to simulate real-world threats, allowing us to uncover any potential weaknesses in our systems and infrastructure.
  • Keep up-to-date with the latest security trends, tools, and techniques to continuously enhance the security posture of the organization, research and evaluate emerging threats and vulnerabilities, and provide recommendations for improving our security practices.
We're looking for someone who:
  • Has proficiency with Javascript and Ruby on Rails.
  • Is able to reason through Python and Java/Kotlin code bases.
  • Understands and can identify and propose fixes for application security gotchas such as those listed in OWASP Top 10.
  • Exhibits an offensive security mindset - thinking critically about what could go wrong.
  • Is comfortable with digging into logs using tools such as SQL and SIEM.
  • Is able to clearly and effectively communicate, internally and externally, security best practices and strategy.
  • Is an effective listener, consensus builder, and effectively incorporates diverse ideas into a coherent vision.

Why Wealthsimple?

  • Competitive salary with top-tier health benefits and life insurance.
  • Retirement savings matching plan using Wealthsimple.
  • 20 vacation days per year and unlimited sick and mental health days.
  • Up to $1,500 per year towards wellness and professional development budgets respectively.
  • 90 days away program: Employees can work internationally in eligible countries for up to 90 days per calendar year.
  • A wide variety of peer and company-led Employee Resource Groups (ie. Rainbow, Women of Wealthsimple, Black @ WS).
  • Company-wide wellness days off scheduled throughout the year.

We’re a remote-first team, with over 1,000 employees coast to coast in North America. Be a part of our Canadian success story and help shape the financial future of millions — join us

DEI Statement: At Wealthsimple, we are building products for a diverse world and we need a diverse team to do that successfully. We strongly encourage applications from everyone regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status.

Accessibility Statement: Wealthsimple provides an accessible candidate experience. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know, and we will work with you to provide the necessary support and make reasonable accommodations to facilitate your participation. We are continuously working to improve our accessibility practices and welcome any feedback or suggestions on how we can better accommodate candidates with accessibility needs.

#J-18808-Ljbffr

  • Moose Jaw, Saskatchewan, Canada Wealthsimple Full time

    Unlock Financial Freedom with Secure Software DevelopmentWealthsimple is revolutionizing the way people manage their finances, and we're looking for a talented Intermediate Software Developer, Application Security to join our team.As a key member of our Application Security and Posture Management team, you'll play a crucial role in protecting our customers'...


  • Moose Jaw, Canada Zynga Full time

    ZyngaOnline games & mobile games offer limitless fun! Play the most popular free games around by Zynga - Farmville, Hit it Rich, Zynga Poker and many more!Zynga is currently seeking an Application Security Engineer to work on today’s evolving offensive and defensive measures in the application security field. This individual will have the unique...


  • Moose Jaw, Canada Cloudflare, Inc. Full time

    Cloudflare, Inc.Make employees, applications and networks faster and more secure everywhere, while reducing complexity and cost.At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual...


  • Moose Jaw, Saskatchewan, Canada Absolute Security Full time

    Absolute Security: A Leader in Endpoint SecurityAt Absolute Security, we're committed to providing resilient cybersecurity solutions for our customers' devices, data, and security controls. Our goal is to create an unbreakable connection to every endpoint, ensuring they're visible, protected, and compliant at all times.We're seeking a highly skilled Security...


  • Moose Jaw, Saskatchewan, Canada Wealthsimple Full time

    Wealthsimple is reimagining financial services to make them transparent and low-cost for everyone. Our teams ship often and make an impact with groundbreaking ideas. We're looking for talented people who keep it simple and value collaboration and humility as we continue to create inclusive and high-performing teams where people can be inspired to do their...


  • Moose Jaw, Saskatchewan, Canada Zynga Full time

    ZyngaAt Zynga, we're seeking a skilled Application Security Specialist to join our team. As a key member of our Cybersecurity team, you'll play a crucial role in ensuring the security of our world-class games.Main Responsibilities:Conduct comprehensive security assessments of our gaming systems, identifying vulnerabilities and contributing to the development...


  • Moose Jaw, Saskatchewan, Canada Okta Full time

    Senior Software Engineer - Identity and Access ManagementAbout OktaOkta is a leading provider of identity and access management solutions. Our Workforce and Customer Identity Clouds enable secure access, authentication, and automation, putting identity at the heart of business security and growth. We empower organizations to safely use any technology,...


  • Moose Jaw, Saskatchewan, Canada Lime Full time

    Revolutionize Transportation Security with LimeLime is on a mission to build a future where transportation is shared, affordable, and carbon-free. As a Staff Security Software Engineer, you will play a critical role in designing, developing, and implementing security, privacy, fraud, and resiliency solutions following the NIST framework.Key...


  • Moose Jaw, Canada Lime Full time

    Lime Go car-free with the world’s largest shared electric vehicle company. Lime is on a mission to build a future where transportation is shared, affordable and carbon-free. Our electric bikes and scooters have powered 400+ million rides in 250+ cities on 5 continents, replacing an estimated 100+ million car trips. Named a Time 100 Most Influential Company...


  • Moose Jaw, Saskatchewan, Canada Zynga Full time

    About the RoleZynga is seeking a highly skilled Application Security Lead to join our team. As a key member of our Cybersecurity team, you will be responsible for guiding proactive security assessments to identify vulnerabilities in our systems, applications, and network infrastructure.Key ResponsibilitiesLead a team of 5-6 Penetration Testers to drive...


  • Moose Jaw, Canada Cloudflare, Inc. Full time

    Application Security and Performance ConsultantCompany: Cloudflare, Inc.At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare...


  • Moose Jaw, Canada Wealthsimple Full time

    Senior Engineering Manager, Application Security and Posture ManagementWealthsimple is the simple way to grow your money like the world's most sophisticated investors. No-maintenance portfolios, expert investment advisers, and low fees.Your career is an investment that grows over time! Wealthsimple is on a mission to help everyone achieve financial freedom...


  • Moose Jaw, Canada Stripe Full time

    Security Infrastructure Engineer, Secure DevicesCompany: StripeStripe powers online and in-person payment processing and financial solutions for businesses of all sizes. Accept payments, send payouts, and automate financial processes with a suite of APIs and no-code tools.Stripe is a financial infrastructure platform for businesses. Millions of...


  • Moose Jaw, Canada Cloudflare, Inc. Full time

    Principal Systems Engineer - Application Security / Threat DetectionCloudflare, Inc. - Make employees, applications and networks faster and more secure everywhere, while reducing complexity and cost.At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites...


  • Moose Jaw, Saskatchewan, Canada Absolute Security Full time

    Absolute Security is a leading provider of endpoint security solutions, serving over 16,000 customers globally with more than 13 million activated endpoints. We are currently seeking an experienced Information Security Audit Specialist to join our Security, Risk and Compliance team.Job Description:The ideal candidate will have a strong background in...


  • Moose Jaw, Saskatchewan, Canada Wealthsimple Full time

    Senior Infrastructure Security DeveloperWealthsimple is a fintech company that aims to make financial services accessible to everyone. As a Senior Infrastructure Security Developer, you will play a crucial role in ensuring the security of our systems and data.Key Responsibilities:Develop and implement comprehensive infrastructure security strategies to...


  • Moose Jaw, Saskatchewan, Canada Cloudflare, Inc. Full time

    Job DescriptionCloudflare, Inc. is seeking a highly skilled professional to join our team as an Application Security and Performance Consultant.About the Role:As a key member of our team, you will be responsible for delivering technical solutions and guidance to our clients to help them get the most out of their Cloudflare investment. Your expertise in Layer...


  • Moose Jaw, Saskatchewan, Canada Cloudflare, Inc. Full time

    About the RoleWe are seeking a highly skilled Security Engineer to join our team at Cloudflare, Inc.Estimated Annual Salary: $150,000 - $200,000The successful candidate will be responsible for helping us secure both Cloudflare and our customers by working closely with our engineering and security teams.Key ResponsibilitiesCollaborate with engineers to...


  • Moose Jaw, Canada Wealthsimple Full time

    Senior Infrastructure Security DeveloperWealthsimple is the simple way to grow your money like the world's most sophisticated investors. No-maintenance portfolios, expert investment advisers, and low fees.Your career is an investment that grows over time! Wealthsimple is on a mission to help everyone achieve financial freedom by reimagining what it means to...

  • IT Security Director

    1 month ago


    Moose Jaw, Saskatchewan, Canada fabric Full time

    Unlock Your Potential as an IT Security Manager at FabricAre you a seasoned IT professional with a passion for security and compliance? Do you thrive in a dynamic SaaS environment? We're seeking an exceptional IT Security Manager to join our team at Fabric, a leading commerce platform for omnichannel retailers.Key Responsibilities:Technical Leadership:...