Senior DevSecOps Engineer

📋 Description

• Own platform security and reliability improvements across GCP.
• Harden identity and network controls in GCP (IAM, workload identity, policies).
• Embed security into CI/CD with SAST, SCA, secret detection, and scans.
• Drive vulnerability management and software supply chain risk.
• Lead threat modeling and security design reviews for new features/architecture.
• Lead investigations and coordinate incident response for security alerts.

🎯 Requirements

• 5+ years in cloud infra and security (DevSecOps, platform security, SRE).
• Hands-on GCP (preferred) or AWS; strong cloud networking and identity.
• Kubernetes and service networking expertise.
• IaC skills (Terraform) and reusable automation.
• Experience integrating security into CI/CD and workflows (scanners, policy).
• Incident response experience: investigation, coordination, follow-through.

🎁 Benefits

• Supportive, collaborative team.
• Comprehensive benefits package (health, dental, etc).
• Flexible time-off; remote, hybrid, or Toronto HQ.
• Home office stipend and learning budget.
• High-impact, mission-driven work.