Role overview

Wealthsimple, Canada’s leading financial innovator, is seeking a Senior Incident Response Developer to join the Detection & Response team. You will take ownership of complex security incident investigations, lead response efforts during high-pressure situations, and build the processes and automation that help the organization respond to and recover from security threats effectively.

Key responsibilities

Investigate complex security incidents and serve as Incident Commander to bring investigations to resolution.
Develop new playbooks, scripts, and automated workflows that transform recurring incident types into routine, repeatable processes.
Build and strengthen relationships with Engineering teams to identify opportunities for security automation and process improvement.
Mentor team members in incident response practices, helping them develop skills and ensuring consistency in investigation outcomes.
Coordinate investigations of sensitive activities including potential fraud, insider threats, and privacy concerns in partnership with HR, Fraud, and Privacy teams.
Participate in an on-call rotation to respond to security incidents and provide operational support.
Work with Security Engineers to monitor, refine, and expand SIEM and SOAR platforms, and collaborate with detection engineering to develop high-fidelity detection rules based on incident trends.

Requirements

At least 5 years of experience in the cybersecurity domain.
A minimum of 3 years of experience as an Incident Manager, owning and directing security investigations.
Demonstrated ability to lead teams during high-stress situations, providing clear direction and support to colleagues.
Proficiency with SIEM tools and the ability to extract meaningful signals from security data.
Hands-on proficiency with AI coding tools such as Claude Code, Cursor, or ChatGPT for building automation and improving workflows.
Knowledge of cloud infrastructure and familiarity with how to design workflows that leverage tooling and automation effectively.
Strong judgment under pressure, both in technical problem-solving and cross-functional collaboration, combined with a commitment to honesty, transparency, and inclusivity in stakeholder communication.

What makes this role worth considering

This is a hands-on technical leadership position where you’ll shape the direction of security incident response at a rapidly growing company serving over 4 million Canadians. You’ll work with a talented, curious team across North America in a hybrid environment, with generous benefits including 20 vacation days, 4 wellness days, unlimited sick and mental health days, and the ability to work outside Canada for up to 90 days per year.