Our mission is to provide a positive, empowering, and transparent property financing experience that is simple from start to finish. Our team consists of skilled technology experts, caring mortgage specialists, and a diverse marketing team, all working together to lead change in the mortgage industry. Our clients love our positive, empowering, and transparent mortgage financing experience.

Our Mortgage

Cloud platform gives financial institutions full access to nesto’s proprietary technology, powering a better client experience, from start to finish. We're a rapid-paced, interdisciplinary team working on multiple tech projects simultaneously. We are looking for a Senior Security Developer to join our dynamic team.

In this role, you will play a critical role in designing, implementing, and maintaining cloud security solutions to protect our cloud-based systems and applications. You will work closely with our development and operations teams to ensure the security and integrity of our cloud infrastructure. Implement and maintain robust security controls to protect our cloud infrastructure and applications.

Discover, remediate, and validate security issues across cloud infrastructure. Perform architectural/design reviews through a security lens and provide timely, actionable requirements and recommendations. Collaborate with security leadership, compliance, and engineering teams to execute security strategies.

Build, deploy, and manage security tools such as WAF, IDS/IPS, workload protection, GCP Command Center, and Azure Security Center, etc. Propose and contribute to security and compliance improvements for nesto CI/CD pipelines and deployment processes. Automate infrastructure provisioning and deployment processes using Infrastructure as Code (IaC) tools like Terraform or Pulumi.





Support audits and first-party security questionnaires. Conduct and oversee security assessments and threat modeling exercises. Implement security controls within Kubernetes. 5+ years of experience working on a team focused on infrastructure and/or security. 5+ years of development experience (ideally GoLang, TypeScript/JS).

Knowledge of common web application vulnerabilities and the OWASP Top 10 framework. Skilled in DevSecOps principles and familiarity with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps) to perform automated security testing.

Experience deploying and customizing security tools to address threats and lower risk, including vulnerability scanners, static analyzers, web application firewalls (WAFs), intrusion detection/prevention systems (IDS/IPS), and endpoint security monitoring. A comprehensive grasp of cloud and network security, including an in-depth understanding of Kubernetes.

Security Command

Center, GKE, Cloud IDS, Cloud Armor, and Secrets Manager.

Security

Center, Azure PaaS App Services, VMs, Azure SQL, Front Door, and Key Vault.

Experience writing infrastructure-as-code using tooling such as Terraform, Pulumi, and Helm. Knowledge of common security-related frameworks and benchmarks like CIS, NIST, and MITRE ATT&CK.;

Experience managing security posture by collating, digesting, and monitoring outputs from tooling. Skilled in DevSecOps principles and familiar with CI/CD (Github Action and Argo CD) pipelines to perform automated security testing You will touch more production systems in one year than you would in five years at a bank. 4 weeks of vacation to ensure you stay at peak performance. Diversity and Inclusion

We are committed to fostering a culture of diversity, equity, inclusion, and belonging, and we strongly encourage women, people of color, LGBTQIA+ individuals, and individuals with disabilities to apply.

📌 Senior Security Automation Developer (Winnipeg)
🏢 Nesto
📍 Winnipeg