Wealthsimple is hiring a
Senior Application Security Developer, Remote - Canada

Summary

The job is for an Application Security Engineer at Wealthsimple, a Canadian fintech company. The role involves conducting penetration tests, designing offensive security strategies, developing automated tools, auditing source code, and keeping up-to-date with the latest security trends. The ideal candidate should be skilled in various programming languages, have a thorough understanding of application security principles, and communicate security concepts effectively.

Requirements

• Is able to reason through Ruby, Javascript, Python, and Java/Kotlin code bases which are used in some of our support services
• Has a thorough understanding of application security principles, including the ability to identify vulnerabilities highlighted in the OWASP Top 10, and can propose effective fixes

Responsibilities

• Conduct penetration tests across applications to identify security weaknesses
• Design and implement offensive security strategies and attack scenarios to uncover potential weaknesses in our systems and infrastructure
• Develop automated tools like Nuclei to enhance our security capabilities
• Audit source code and perform code reviews for critical application changes
• Keep up-to-date with the latest security trends, tools, and techniques to continuously enhance the security posture of the organization

Benefits

• Competitive salary with top-tier health benefits and life insurance
• Retirement savings matching plan using Wealthsimple Work
• 20 vacation days per year and unlimited sick and mental health days
• Up to $1,500 per year towards wellness and professional development budgets respectively
• 90 days away program: Employees can work internationally in eligible countries for up to 90 days per calendar year
• A wide variety of peer and company-led Employee Resource Groups (ie. Rainbow, Women of Wealthsimple, Black @ WS)
• Company-wide wellness days off scheduled throughout the year