Security Incident Response Developer

The role

You will investigate security incidents, improve response processes, and build automation. You will work with the Detection & Response team to strengthen incident response capabilities and manage workflows.

What you will do

• Strengthen incident response capabilities by building relationships with Engineering teams, writing new playbooks and automating manual steps.
• Own investigations from start to finish: triage, evidence collection, analysis, containment and documentation.
• Act as Incident Commander for low- and medium-severity incidents, and support senior responders on high-severity ones.
• Turn recurring incident types into repeatable workflows.
• Report incident trends and metrics that inform team priorities.
• Work with Security Engineers to monitor, refine and expand SIEM and SOAR platforms.
• Work with HR, Fraud and Privacy teams on investigations into potentially fraudulent and sensitive activity.
• Participate in an on-call rotation for responding to security incidents, internal questions and operational support.
• Work with the detection engineering team to develop new, high-fidelity detection rules.

Required qualifications

• 3+ years of experience in cybersecurity.
• 1–2+ years of hands-on incident response experience, owning investigations end to end.
• The ability to coordinate responders and stakeholders during an incident, and know when to escalate.
• Experience using a SIEM to turn noise into signal, including writing queries and tuning alerts.
• Proficiency with AI coding tools (Claude Code, Cursor, ChatGPT, etc.) to build and maintain automation.
• A workflow mindset.
• Working knowledge of cloud infrastructure (e.g., AWS, GCP or Azure) and how to investigate within it.
• Discretion and sound judgment when handling sensitive information.
• Clear, honest and inclusive communication with both internal and external stakeholders.
• Good judgment under pressure, in technical problem solving and in working across teams.
• A strong desire to learn from the team and others.

Benefits

• Top-tier health benefits and life insurance
• Long-term group savings with employer match, through Wealthsimple for Business
• 20 vacation days
• 4 wellness days
• unlimited sick and mental health days per year*
• 90 days away: work outside Canada for up to 90 days per year*
• Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS

About the company

Wealthsimple is Canada’s leading financial innovator, offering a full suite of financial products. The company is headquartered in Toronto, Canada.