Security Incident Response Developer

Wealthsimple

. Build relationships with Engineering teams to strengthen incident response capabilities .

Posted 10/30/2026full-timeRemote • CanadaMid-LevelSenior💰 CA$123,200 - CA$154,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response, including investigation, analysis, and automation of workflows. Proficient in utilizing SIEM tools and cloud infrastructure to enhance security operations and incident management.

Highest-signal resume keywords

Incident Response ExperienceSIEM ProficiencyAutomation with AI Coding ToolsCloud Infrastructure KnowledgeStrong Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationEvidence CollectionThreat Intelligence AnalysisDetection Rule DevelopmentIncident CommandPlaybook WritingAlert TuningWorkflow AutomationSecurity Metrics ReportingIncident Trend Analysis

Soft Skills

Clear CommunicationJudgment Under PressureCollaborationDiscretionDesire to Learn

Tools & Technologies

SIEM PlatformsSOAR PlatformsClaude CodeCursorChatGPTAWSGCPAzure

Industry Keywords

CybersecurityIncident ResponseFraud InvestigationPrivacy ComplianceInsider Threats

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Build relationships with Engineering teams to strengthen incident response capabilities
Write new playbooks and automate manual incident-response steps
Own investigations from triage through evidence collection, analysis, containment, and documentation
Act as Incident Commander for low- and medium-severity incidents
Support senior responders on high-severity incidents
Turn recurring incident types into repeatable workflows from design through tooling and closure
Report incident trends and metrics to inform team priorities
Monitor, refine, and expand SIEM and SOAR platforms with Security Engineers
Investigate potentially fraudulent and sensitive activity with HR, Fraud, and Privacy teams, including insider threats and snooping
Participate in an on-call rotation for security incidents, internal questions, and operational support
Develop high-fidelity detection rules with detection engineering based on incident trends and threat intelligence
Report to the Manager of Detection & Response

Requirements

What you’ll need

3+ years of experience in cybersecurity
1–2+ years of hands-on incident response experience, owning investigations end to end
Ability to coordinate responders and stakeholders during an incident and know when to escalate
Experience using a SIEM to turn noise into signal, including writing queries and tuning alerts
Proficiency with AI coding tools such as Claude Code, Cursor, and ChatGPT to build and maintain automation
Workflow mindset for breaking recurring problems into steps that tooling or AI can handle
Working knowledge of cloud infrastructure such as AWS, GCP, or Azure and how to investigate within it
Discretion and sound judgment when handling sensitive information, including HR and insider-threat matters
Clear, honest, and inclusive communication with internal and external stakeholders
Good judgment under pressure in technical problem solving and cross-team work
Strong desire to learn from the team and others
Legal eligibility to work in Canada

Benefits

Comp & perks

Top-tier health benefits and life insurance
Long-term group savings with employer match, through Wealthsimple for Business
20 vacation days
4 wellness days
Unlimited sick and mental health days per year (does not apply to certain roles)
Work outside Canada for up to 90 days per year (90 days away program; does not apply to certain roles)
Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS
Equity compensation for permanent employees
AI-assisted interview recording and transcription, with opt-out available and no impact on candidacy