Cloud Security Engineer
Scotiabank
Requisition ID: 233462
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.
The Cloud Security Engineer, Cloud and Application Platform Engineering will be responsible for providing technical leadership within a diverse team of cloud security engineers, leveraging industry leading secure SDLC processes to support application security tools and infrastructure mandated by Cloud and Application Security in their mission of protecting the bank and its customers from external threats.
Contributes to the overall success of the Cloud and Application Security Engineering team in Canada ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team’s business strategies and objectives. Ensures all activities conducted are following governing regulations, internal policies and procedures.
Is this role right for you? In this role you will:
- Collaborate in a team environment spanning multiple geographies to execute on support and project tasks and initiatives.
- Perform various DevSecOps activities supporting tools and infrastructure spanning on-premises, private cloud, SaaS, PaaS, and public cloud environments supporting the bank’s secure SDLC processes – expanding support levels towards a targeted 24/7 support model.
- Work with vendors and technology teams to maintain security compliance and software currency within our tools, platforms, and infrastructure.
- Working from requirements, assist in planning, analysis, design, development, testing, and implementing solutions supporting security at the bank.
- Develop and support operations for tools developed by Security Engineering teams and transition to Day 2 operations.
- Reporting to management on the status of the system of internal controls with recommendations for remediation of risks.
- Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
- Actively pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct, and the Global Sales Principles, while ensuring the adequacy, adherence to, and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
- Champions a high-performance environment and contributes to an inclusive work environment.
Do you have the skills that will enable you to succeed in this role?
- 3+ years experience working within a DevSecOps support or project team utilizing Agile, DevSecOps, and other secure SDLC methodologies
- Hands-on experience with system administration and DevSecOps support of Linux, Windows, SQL Server, PostgreSQL, and other vendor software.
- Software and system architecture and technical documentation experience is an asset
- Excellent organization, time management, problem-solving, and analytical skills
- Experience with legacy technologies (standalone servers and databases, Windows, Linux, SQL Server, PostgreSQL) as well as modern technology stacks (on-prem, PaaS, SaaS, public cloud, GCP, GKE, GSCCE, GAR, Cloud SQL, Azure, APIGEE)
- Experience working with and troubleshooting development pipelines (BB, TFS, GH, Jenkins) as asset
- Experience developing automation scripts with Python, PowerShell, AWK, and more an asset.
- Basic knowledge and understanding of security capabilities (SCA, SAST, DAST, MAST, CNAPP, APISec, Posture Management)
- Basic knowledge and understanding of coding best practices in various languages (C#, .NET, Java) and the importance of environment configuration, artifact dependencies, and secure supply chain management
What's in it for you?
- Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
- Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
- Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
- Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
- Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!
Location(s): Canada : Ontario : Toronto
Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.