Security Developer, Wealthsimple
Vulnerability Management
Professional investing services made simple
Job no longer available
Professional investing services made simple
1001+ employees
Job no longer available
1001+ employees
Company mission
To help everyone achieve financial freedom.
Role
Who you are
- We're looking for talented people who keep it simple and value collaboration and humility
- Possesses 4+ years of full-stack coding experience, ideally in languages such as Ruby on Rails, Python, or JavaScript
- Boasts over 3 years of hands-on experience in secure code review and vulnerability assessment
- Demonstrates a strong understanding of the software development life cycle and CI/CD pipeline
- Exhibits proficient knowledge of security principles, including OWASP top 20, best practices, and common vulnerabilities, alongside expertise in security testing tools like DAST, SAST, SCA, and infra/cloud scanners, for example, Burpsuite, Nuclei, SemGrep, ZAP
- Familiarity with Vulnerability Management within microservice architectures, encompassing Infrastructure as Code, cloud networks, hosts, containers, and images
- Possesses excellent collaboration skills, enabling effective communication and cooperation with Engineering, Security, and Risk teams to elucidate the offensive impact of vulnerabilities and recommend effective remediation strategies
What the job involves
- Strengthen our application and infrastructure security through meticulous vulnerability management, ensuring swift remediation of vulnerabilities
- Detect and authenticate vulnerabilities in code through rigorous manual security code reviews across all programming languages utilized within our systems, alongside employing tools such as SAST, SCA, Zap, Nuclei, and Burpsuite
- Actively engage in remediating vulnerabilities by crafting pull requests for engineering teams, facilitating seamless collaboration with stakeholders to assign ownership, and guiding developers through the remediation process
- Prioritize and generate tickets for scanner findings, meticulously tracking and following up on the remediation process
- Apply an offensive security mindset to conduct comprehensive risk assessments of vulnerabilities
- Seamlessly integrate various vulnerability assessment tools with our tracking system via APIs
- Streamline vulnerability management processes through automation wherever feasible
- Engage with cloud, network, and infrastructure scanners to identify and address vulnerabilities, leveraging technologies like PrismaCloud, AWS Inspector, Terraform, CloudFormation, and Kubernetes
- Contribute to our security champion program by developing informative talks and training materials
Our take
Wealthsimple is one of a crop of robo-advisors trying to democratise investment management. These companies are disrupting the industry by automating many of the processes involved in investment, removing the need for human advisors.
But while other so-called robo-advisors are focused on courting the high end of the market, Wealthsimple is trying to provide the same types of tools and advice to all users, regardless of the amount they have to invest.
Wealthsimple does have higher fees than some other robo-advisors such as Betterment and Charles Schwab. However, the company believes that it provides a more user-friendly platform, tailored to millennials who will be attracted to Wealthsimple due to its ease of use and social impact offerings.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-10% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Oct 2025
$395.2m
LATE VC
May 2021
$538.9m
LATE VC
Total funding: $1.2bn
Company benefits
- Retirement savings matching plan through Wealthsimple Work
- Company equity for full-time employees
- Access to Premium Client perks, including personal finance learning & advice and a boosted interest rate on deposits
- Paid parental leave (6 months topped up to 100% of salary)
- 20 vacation days per year
- 90 Days Away program
- Top-tier health benefits
- Life & disability insurance
- Generous sick and mental health days
- Employee resource plan including services like RMT, psychology, and physiotherapy
- Up to $5,000 per year for mental health supports
- Gender Affirmation benefits
- Up to $1,500 per year for professional development
- Up to $1,500 per year for wellness and home office expenses
- Employee resource groups
- Social impact hours
Company HQ
Fashion District, Toronto, ON
Leadership
Michael Katchen
(Co-Founder & CEO)Previously worked as a Business Analyst at McKinsey and then at Ancestry.com as Country Director for Canada.
Share this job
View 18 more jobs at Wealthsimple