Security Incident Response Developer

Your career is an investment that grows over time!
Wealthsimple is on a mission to help everyone achieve financial freedom by reimagining what it means to manage your money. Using smart technology, we take financial services that are often confusing, opaque and expensive and make them transparent and low-cost for everyone. We’re the largest fintech company in Canada, with over 4 million users who trust us with more than $50 billion in assets.
Our teams ship often and make an impact with groundbreaking ideas. We're looking for talented people who keep it simple and value collaboration and humility as we continue to create inclusive and high-performing teams where people can be inspired to do their best work.

What you will do:

• Help take our security incident response capabilities to the next level by building relationships with our partners, developing response playbooks and automating actions
• Be part of a new team with influence in building and shaping the Security Incident Response program
• Take the role of Incident Commander to bring incidents to resolution
• Partner with our Security Developers to monitor, refine, and expand our SIEM and SOAR platforms
• Share root cause analysis findings by conducting post mortem meetings with cross-functional teams to enhance the organization's security posture through actionable insights and preventative recommendations
• Create detection logic to find anomalies and better prepare to reduce future incidents
• Coordinate with the Fraud and Privacy teams to investigate potential fraudulent and sensitive activity
• Participate in an on-call rotation for responding to security incidents, internal questions and operational support

Who you are:

• 5+ years of experience in the Cybersecurity domain
• 3+ years experience being an Incident Manager, taking ownership of investigations
• Ability to lead a team during high-stress situations, providing direction and support to team members
• Has strong problem solving and communication skills and demonstrates good judgment under pressure both in terms of technical problem solving and collaborating cross functionally
• Experience developing response playbooks and courses of action
• Possesses excellent collaboration skills and the enthusiasm to operate in a multi-discipline environment
• Some scripting ability (Python, Bash)
• Experience building detections and turning SIEM alerts
• Knowledge of and familiarity with cloud infrastructure
• Believes that honesty, transparency, and inclusivity are important when communicating with both internal and external stakeholders
• Eager to learn from the team and others. We value making one another successful!

Why Wealthsimple?🤑 Competitive salary with top-tier health benefits and life insurance📈 Retirement savings matching plan using Wealthsimple Work🌴 20 vacation days per year and unlimited sick and mental health days📚 Up to $1,500 per year towards wellness and professional development budgets respectively 🛫 90 days away program: Employees can work internationally in eligible countries for up to 90 days per calendar year 🌎 A wide variety of peer and company-led Employee Resource Groups (ie. Rainbow, Women of Wealthsimple, Black @ WS) 💖 Company-wide wellness days off scheduled throughout the year
We’re a remote-first team, with over 1,000 employees coast to coast in North America. Be a part of our Canadian success story and help shape the financial future of millions — join us!
Read our Culture Manual and learn more about how we work.
DEI StatementAt Wealthsimple, we are building products for a diverse world and we need a diverse team to do that successfully. We strongly encourage applications from everyone regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status. 
Accessibility StatementWealthsimple provides an accessible candidate experience. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know, and we will work with you to provide the necessary support and make reasonable accommodations to facilitate your participation. We are continuously working to improve our accessibility practices and welcome any feedback or suggestions on how we can better accommodate candidates with accessibility needs.