Senior Security Developer

Engineer the foundations that make secure development effortless!

What if every team at Coveo could ship secure code by default, without friction? As a Senior Security Developer, you’ll build the internal platforms and services that embed security directly into our software development and delivery processes.

You’ll turn complex security requirements into elegant, scalable systems, absorbing the heavy lifting so product and platform teams can innovate faster and safer. If you love building developer-first security tooling in the cloud, you’ll feel right at home here.

As one of our Senior Security Developers, you will:

• Design, build, and evolve internal security services supporting access management, continuous compliance, and secure software delivery.
• Own and enhance security tooling embedded in our continuous integration and continuous deployment (CI/CD) pipelines.
• Design and automate access management workflows to provision, monitor, and audit access to infrastructure and applications.
• Contribute to vulnerability management by triaging findings, managing exceptions, and improving remediation workflows through automation.
• Support compliance automation across our cloud environments, enforcing standards programmatically and at scale.
• Design, deploy, and maintain web application firewalls (WAF) and related application-layer protections to reduce risk exposure.

Here is what will qualify you for the role:

• Strong experience writing reusable, production-grade Python code and building reliable, scalable systems.
• In-depth knowledge of secure software development practices and how to integrate them across the software development lifecycle.
• Hands-on experience with cloud service providers (AWS preferred), securing and configuring compute, storage, networking, and Kubernetes environments.
• Proven track record of automating security and infrastructure processes to reduce friction and complexity for development teams.

What will make you stand out:

• Experience with Terraform or other infrastructure-as-code tools to manage security-related resources such as identity and access management (IAM) roles, secrets, and network controls.
• Hands-on experience designing or operating application security controls such as web application firewalls, runtime protections, API security tooling, or advanced testing tools (static application security testing (SAST), dynamic application security testing (DAST), interactive application security testing (IAST), or runtime application self-protection (RASP)).
• Experience building internal developer platforms or self-service security tooling at scale.
• Familiarity with cloud-native detection, monitoring, or policy-as-code frameworks.

Do you think you can bring this role to life? Send us your application, we want to hear from you!

Join the Coveolife!

We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.

This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.

Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact [email protected] to discuss your needs.