Senior Engineering Manager, Wealthsimple
Application Security and Posture Management
Professional investing services made simple
Open for applications
Professional investing services made simple
1001+ employees
Open for applications
1001+ employees
Company mission
To help everyone achieve financial freedom.
Role
Who you are
- 5-7 years of experience in security or software development with at least 2 years in application security and management
- Proven experience with at least 2 of the following domains: security tooling (e.g. SAST, DAST, SCA, etc), security architecture (e.g. threat modelling, secure code review, etc), or offensive security (e.g. bug bounty programs, pentesting, etc)
- Ability to read and write code at a Sr. Developer level with a preference for experience with Ruby, Javascript, Java, and Python
- Excellent leadership skills with a track record of being able to work closely with product and development teams while growing talent on the team
- A history that demonstrates a maker-owner and growth mindset. You are always thinking and acting like a team player and coach
What the job involves
- The team is currently growing and is expected to reach a size of 4 ICs and & EM by H1 2025
- The team owns the security architecture, security tooling, and offensive security testing for our applications. We enable the business and help Wealthsimple win the trust of our clients driving net deposits, client acquisition, and more
- Reporting to the Sr. Engineering Manager, Security Engineering as a part of the broader Security Engineering function with peers in IAM and Infrastructure Security
- You will be responsible for developing, supporting, and setting the direction for the team and Application Security program so that we can enable the business by effectively scaling in this area
- You will need to establish and maintain strong relationships with product engineering leaders across the organization becoming a trusted partner who is able to influence cross-functional decision making
- You will need to collaborate effectively with other security teams acting as an escalation or subject matter expert as needed to address risks to the business
- In the first 3 months our ideal candidate will have:
- Completed their initial assessment of the application security program and team, and be able to articulate to the business key risks and opportunities
- Reviewed and prioritized existing issues with the team and brought any cross-functional work to the appropriate betting tables to secure buy-in from stakeholders
- Taken ownership of our vendor relationships specifically for our enterprise security testing tools, bug bounty program, and pentest program
- In the first 6 months our ideal candidate will have:
- Developed growth plans for the team based on existing needs including any training, conference, or sourcing budget that may be required
- Established good working relationships with vulnerability management and our product teams through program and product reviews respectively and will have executed on 2-4 threat modelling or pentesting opportunities
- Established what KPIs or SLAs define excellence on this team and established a strong operating cadence for their direct reports in concert with their peers and management team with at least a 4-month roadmap
- In the first 12 months our ideal candidate will have:
- Prepared their teams annual roadmap, budget, and headcount plan for the new year and got appropriate buy-in from their stakeholders
- Reviewed their team's performance against stated objectives, evaluated control effectiveness, and highlighted and suggested changes to the program
Our take
Wealthsimple is one of a crop of robo-advisors trying to democratize investment management. These companies are disrupting the industry by automating many of the processes involved in investment removing the need for human advisors.
But while other so-called robo-advisors are focused on courting the high end of the market, Wealthsimple is trying to provide the same types of tools and advice to all users, regardless of the amount they have to invest.
Wealthsimple does have higher fees than some other robo-advisors such as Betterment and Charles Schwab. However, the company believes that it provides a more user-friendly platform, tailored to millennials who will be attracted to Wealthsimple due to its ease of use and social impact offerings.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
-10% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
May 2021
$521m
LATE VC
Oct 2020
$87m
LATE VC
Total funding: $818.3m
Company benefits
- Retirement savings matching plan through Wealthsimple Work
- Company equity for full-time employees
- Access to Premium Client perks, including personal finance learning & advice and a boosted interest rate on deposits
- Paid parental leave (6 months topped up to 100% of salary)
- 20 vacation days per year
- 90 Days Away program
- Top-tier health benefits
- Life & disability insurance
- Generous sick and mental health days
- Employee resource plan including services like RMT, psychology, and physiotherapy
- Up to $5,000 per year for mental health supports
- Gender Affirmation benefits
- Up to $1,500 per year for professional development
- Up to $1,500 per year for wellness and home office expenses
- Employee resource groups
- Social impact hours
Company HQ
Fashion District, Toronto, ON
Articles
Leadership
Michael Katchen
(CEO)Previously worked as a Business Analyst at McKinsey and then at Ancestry.com as Country Director for Canada.
Share this job
View 14 more jobs at Wealthsimple