Cloud security developer

Role Summary

Our mission is to provide a positive, transparent, simplified mortgage financing experience from start to finish. Our team consists of skilled technology experts, caring mortgage specialists, and a diverse marketing team, all working together to lead change in the mortgage industry.

At nesto, we are proud to

Our customers appreciate our positive, transparent and simplified mortgage financing experience.

Our 4.5 star reviews on Google speak for themselves!

We won the 2023 and 2024 CLA Mortgage Lender of the Year Award, which recognizes our excellence in lending services.

We are a certified B Corp organization, highlighting our commitment to making a positive impact on our society and our planet.

Our highly skilled, diverse and collaborative team makes everything possible.

Our Mortgage Cloud platform provides financial institutions with full access to nesto's proprietary technology, improving the customer experience from start to finish.

We are an interdisciplinary and dynamic team that works simultaneously on multiple technological projects. Our team is diverse and works on different products, and at nesto we recognize that they are interconnected.

We are looking for a Cloud Security Developer to join our dynamic team. In this role, you will play a critical role in designing, implementing and maintaining cloud security solutions to protect our cloud-based systems and applications. You will work closely with our development and operations teams to ensure the security and integrity of our cloud infrastructure.

We value a diversity of perspectives and experiences. We're not looking for someone who ticks all the boxes; we are looking for passionate learners and people who can enrich us with their unique experiences.

Responsibilities

• Implement and maintain robust security controls to protect our cloud infrastructure and applications.
• Discover, remediate and validate security issues across cloud infrastructure.
• Conduct architectural and design reviews from a security perspective and provide timely and actionable requirements and recommendations.
• Collaborate with security leadership, compliance and engineering teams to execute security strategies.
• Build, deploy and manage security tools such as WAF, IDS/IPS, Workload Protection, GCP Security Command Center, Azure Security Center, etc.
• Propose and contribute to security and compliance improvements for CI/CD pipelines and nesto deployment processes.
• Automate infrastructure provisioning and deployment processes using Infrastructure as Code (IaC) tools like Terraform or Pulumi.
• Design and operate scalable processes to provision cloud access and maintain the principle of least privilege.
• Participate and support the incident detection and response process by improving observability and alerting, and assisting the incident response team.
• Self-organize and prioritize activities independently.
• Support first-party security audits and questionnaires.
• Conduct and supervise security assessments and threat modeling exercises.
• Implement security controls within Kubernetes.
• Build DevSecOps tools/integrations.

Who we are looking for

• 5+ years of experience working on a team focused on infrastructure and/or security.
• 5+ years of development experience (ideally GoLang, TypeScript/JS).
• Knowledge of common web application vulnerabilities and the OWASP Top 10 framework.
• Ability to analyze and act on the results of DAST and SAST tools (e.g. Tenable, Snyk).
• Mastery of DevSecOps principles and familiarity with CI/CD pipelines (GitHub Actions, Argo CD, Azure DevOps) to perform automated security testing.
• Experience deploying and customizing security tools to address threats and reduce risk, including vulnerability scanners, static analyzers, web application firewalls (WAF), intrusion detection/prevention systems (IDS/IPS), and endpoint security monitoring.
• A thorough understanding of cloud and network security, including in-depth knowledge of Kubernetes.
• Error 500 (Server Error)!!1500.That’s an error.There was an error. Please try again later.That’s all we know.