wealthsimple - Security Incident Response Developer

Remote - Canada2h ago

Remote Junior NA Cybersecurity Cloud Computing Security Analyst Reporting Claude Cursor ChatGPT Slack GCP AWS Azure Documentation

Requirements

• 3+ years of experience in cybersecurity. • 1–2+ years of hands-on incident response experience, owning investigations end to end. • The ability to coordinate responders and stakeholders during an incident, and know when to escalate. • Experience using a SIEM to turn noise into signal, including writing queries and tuning alerts. • Proficiency with AI coding tools (Claude Code, Cursor, ChatGPT, etc.) to build and maintain automation. We invest in tooling (automation, Slack bots, AI agents) so responders spend their energy on the decisions that matter. • A workflow mindset: you can look at a messy, recurring problem and break it into steps that tooling or AI can take on. • Working knowledge of cloud infrastructure (e.g., AWS, GCP or Azure) and how to investigate within it. • Discretion and sound judgment when handling sensitive information, such as HR and insider-threat matters. • Clear, honest and inclusive communication with both internal and external stakeholders. • Good judgment under pressure, in technical problem solving and in working across teams. • A strong desire to learn from the team and others. We value making one another successful!

Responsibilities

• Strengthen our incident response capabilities by building relationships with Engineering teams, writing new playbooks and automating manual steps. • Own investigations from start to finish: triage, evidence collection, analysis, containment and documentation. • Act as Incident Commander for low- and medium-severity incidents, and support senior responders on high-severity ones. • Turn recurring incident types into repeatable workflows (intake, playbook, automation, closure), from the first design through to the tooling behind them. • Report incident trends and metrics that inform team priorities. • Work with our Security Engineers to monitor, refine and expand our SIEM and SOAR platforms. • Work with the HR, Fraud and Privacy teams on investigations into potentially fraudulent and sensitive activity, including insider threats and snooping. • Participate in an on-call rotation for responding to security incidents, internal questions and operational support. • Work with the detection engineering team to develop new, high-fidelity detection rules based on incident trends and threat intelligence.

Benefits

• 🌸 Top-tier health benefits and life insurance • 📈 Long-term group savings with employer match, through Wealthsimple for Business • 🌴 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year* • ✈️ 90 days away: work outside Canada for up to 90 days per year* • 👥 Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS • 🌎 We are a hybrid team with over 1,500 employees across North America. The people are one of the best parts of working here: you'll collaborate with incredibly talented, curious, and driven teammates who are deeply committed to doing great work. • Unlimited paid sick days, Wellness Days and the 90 day away program do not apply to certain roles. • Technology & Innovation at Wealthsimple: We move quickly and build thoughtfully. That means we're always looking for better ways to work — whether that's new tools, AI, or rethinking how we approach a problem. We don't expect you to have all the answers, but we do expect curiosity and a willingness to evolve alongside the products we're building. • Inclusion Statement: We're building products for a diverse world, and we need a diverse team to do it well. We strongly encourage applications from everyone, regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status. • Accessibility Statement: We're committed to an accessible hiring experience. If you need any accommodations throughout the interview process, please let us know — we'll work with you to make sure you have what you need. We also welcome any feedback on how we can better accommodate candidates with accessibility needs. • AI in Hiring: We may use artificial intelligence (AI) tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but don't replace human judgment – all final hiring decisions are made by people. If you have questions about how your data is used, reach out to us.