Senior Security Incident Response Developer

Your career is an investment that grows over time Wealthsimple is on a mission to help everyone achieve financial freedom by reimagining what it means to manage your money. Using smart technology, we take financial services that are often confusing, opaque and expensive and make them transparent and low-cost for everyone. We’re the largest fintech company in Canada, with over 3+ million users who trust us with more than $100 billion in assets. Our teams ship often and make an impact with groundbreaking ideas. We're looking for talented people who keep it simple and value collaboration and humility as we continue to create inclusive and high-performing teams where people can be inspired to do their best work. We are seeking an experienced and hands‑on security professional to join our Detection & Response team as a Senior Incident Response Developer. Reporting to the Manager of Detection & Response, this is a critical, technical role focused on strengthening our ability to respond to and recover from security threats. You will be a key player in investigating complex security incidents, building scalable response processes, and taking command when it matters most. The ideal candidate has a deep, technical background in hands‑on incident response and a keen eye for where automation can improve and scale our capabilities. You are a natural problem‑solver who remains composed under pressure, a senior team member who enjoys mentoring others in the craft of incident response, and a builder who can create the playbooks, scripts, and processes needed to protect our company and our customers. In this role, you will have the opportunity to: Help take our security incident response capabilities to the next level by building relationships with Engineering teams, new playbooks and finding opportunities for automation Grow others in the art of Incident Response to support the program and increase consistency in outcomes Play a key role in building and shaping the Security Incident Response team Take the role of Incident Commander to bring incidents to resolution Help shape the direction of investment by informing the business of trends and relevant metrics Partner with our Security Engineers to monitor, refine, and expand our SIEM and SOAR platforms Coordinate with the Fraud and Privacy teams to investigate potential fraudulent and sensitive activity Participate in an on‑call rotation for responding to security incidents, internal questions and operational support Partner with the detection engineering function to develop new, high‑fidelity detection rules based on incident trends and threat intelligence. We’re looking for someone who: 5+ years of experience in the Cybersecurity domain 3+ years experience being an Incident Manager, taking ownership of investigations Ability to lead a team during high‑stress situations, providing direction and support to team members. Understand how to turn noise into signals using a SIEM Proficiency in scripting languages like Python or Bash to automate incident response playbooks and integrate security tools. Knowledge of and familiarity with cloud infrastructure Believes that honesty, transparency, and inclusivity are important when communicating with both internal and external stakeholders Demonstrates good judgment under pressure both in terms of technical problem solving and collaborating cross functionally Eager to learn from the team and others. We value making one another successful We're reviewing applications on a rolling basis and will be in touch with qualified candidates soon. Please note that our hiring process may slow down a bit during the holiday season and we may be in touch early in the new year. Why Wealthsimple?