Role overview

Wealthsimple, Canada’s leading financial innovator serving over 4 million Canadians with more than $169 billion in assets under administration, is seeking a Security Incident Response Developer to join the Detection & Response team. In this early-career role, you’ll investigate real security incidents, improve response processes, and build automation to scale the team’s capabilities while receiving mentorship from experienced security professionals.

Key responsibilities

Own security incident investigations from initial triage through evidence collection, analysis, containment and documentation.
Serve as Incident Commander for low- and medium-severity incidents while supporting senior responders on high-severity cases.
Build relationships with Engineering teams, develop new incident playbooks and automate manual response steps to strengthen overall capabilities.
Convert recurring incident types into repeatable workflows including intake procedures, playbooks, automation and closure processes.
Participate in on-call rotation to respond to security incidents, answer internal questions and provide operational support.
Work with Detection Engineering to develop new detection rules based on incident trends and threat intelligence.
Collaborate with Security Engineers on SIEM and SOAR platform monitoring and refinement, and coordinate with HR, Fraud and Privacy teams on sensitive investigations including insider threats.

Requirements

Minimum 3 years of cybersecurity experience with 1–2+ years of hands-on incident response, owning investigations end to end.
Proven ability to use a SIEM platform to reduce noise and generate actionable signals, including writing queries and tuning alerts.
Proficiency with AI coding tools such as Claude Code, Cursor or ChatGPT to build and maintain automation.
Working knowledge of cloud infrastructure including AWS, GCP or Azure, and the ability to investigate within these environments.
Ability to coordinate responders and stakeholders during incidents and sound judgment on when to escalate.
A workflow mindset that can break complex, recurring problems into steps suitable for tooling or AI automation.
Discretion and sound judgment handling sensitive information; clear, honest and inclusive communication with internal and external stakeholders; and composure under pressure in technical problem-solving and cross-team collaboration.

What makes this role worth considering

You’ll work remotely across Canada with a hybrid team of over 1,500 talented employees while receiving direct mentorship from experienced responders on a detection and response team that invests heavily in automation tooling and AI. The role offers competitive benefits including 20 vacation days, 4 wellness days, unlimited sick and mental health days, the ability to work outside Canada for up to 90 days per year, and employer-matched long-term savings through Wealthsimple for Business.