Cloud Security Developer

5+ years of experience working on a team focused on infrastructure and/or security.

5+ years of development experience (ideally GoLang, TypeScript/JS).

Knowledge of common web application vulnerabilities and the OWASP Top 10 framework.

The ability to analyze and act on results from DAST and SAST tools (e.g., Tenable, Snyk).

Skilled in DevSecOps principles and familiarity with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps) to perform automated security testing.

Experience deploying and customizing security tools to address threats and lower risk, including vulnerability scanners, static analyzers, web application firewalls (WAFs), intrusion detection/prevention systems (IDS/IPS), and endpoint security monitoring.

A comprehensive grasp of cloud and network security, including an in-depth understanding of Kubernetes.

Experience in GCP specifically with one or more of the following services: Security Command Center, GKE, Cloud IDS, Cloud Armor, and Secrets Manager.

Experience in Azure specifically with one or more of the following services: Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault.

Experience writing infrastructure-as-code using tooling such as Terraform, Pulumi, and Helm.

Knowledge of common security-related frameworks and benchmarks like CIS, NIST, and MITRE ATT&CK.

An understanding of identity and access management (IAM) principles and cloud-native IAM solutions.

Passionate about constant learning and sharing knowledge with others.

Bilingual (English & French).

Experience managing security posture by collating, digesting, and monitoring outputs from tooling.

Experience working with infrastructure-as-code using tooling such as Terraform, Pulumi, and Helm.

Skilled in DevSecOps principles and familiar with CI/CD (Github Action and Argo CD) pipelines to perform automated security testing

The A-Team: Work alongside high-performing talent in the industry.

Accelerated Growth: The slope of your learning curve here will be vertical. You will touch more production systems in one year than you would in five years at a bank.

Top-Tier Coverage: Premium benefits plan fully paid by nesto, including comprehensive insurance and unlimited access to telemedicine and mental health services for you and your family.

Rest & Recharge: 4 weeks of vacation to ensure you stay at peak performance.

Best-in-Class Tools: Access to the resources and tech you need to execute without friction.

Working framework: The environment that makes you productive and enables teamwork (Hybrid model).

At nesto, we believe that creativity and collaboration are the result of a diverse team. We are committed to fostering a culture of diversity, equity, inclusion, and belonging, and we strongly encourage women, people of color, LGBTQIA+ individuals, and individuals with disabilities to apply. We are committed to creating a workplace that is inclusive and welcoming to all.