Senior Security Developer

Drive the integration of security practices to the software development and delivery process

As a developer in this team, you will build the tooling required to implement DevSecOps the best way possible for Coveo. On top of it, you will build and maintain multiple internal services that work together to support day to day security operations, like access management, continuous compliance or security testing. You will be collaborating with teams across the company to help them ship innovations faster and safer, by absorbing security complexity and making their life easier. All that, in the cloud, using the best providers out there. Do you have an idea that saves time for everyone else? Do it!

Here is a glimpse at your responsibilities:

• Own and evolve the security tools Coveo uses in both the continuous integration and continuous deployments pipeline.
• Design and support access management workflows to control and monitor access to infrastructure and applications.
• Push the envelope, find clever solutions to make Coveo reach its key objectives.
• Participate in vulnerability management processes by triaging findings, managing exceptions, and helping ensure timely remediation.
• Support compliance automation using tools to enforce standards across cloud infrastructure.
• Design, deploy, and maintain web application firewalls to protect Coveo from potential vulnerabilities.
• Partner with engineering, infrastructure, and business teams to design security controls that align with real-world constraints.

Here is what will qualify you for the role:

• You are well versed in producing reusable code in Python, building robust and scalable systems.
• You have in-depth knowledge of best security practices in the context of software development.
• You have hands on previous Cloud service provider experience (ideally AWS), configuring and securing a variety of services, including Compute, Storage, Networking and Kubernetes
• You possess in-depth knowledge of DevOps tools and workflows, enabling seamless integration of security practices throughout the software development lifecycle.
• You have a track record of automating security and infrastructure processes to reduce complexity for other developers.

Here is what would make you stand out:

• Bonus if you are proficient with Terraform for infrastructure-as-code, especially for security-related resources like IAM roles, secrets, etc.
• You have hands-on experience designing, operating, or integrating application security controls such as web application firewalls (WAF), application-layer threat detection, runtime protections, and security testing or monitoring tooling (e.g., SAST, DAST, IAST, RASP, or API security tools).

Do you think you can bring this role to life? Send us your application, we want to hear from you!

Join the Coveolife!

We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.

This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.

Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact HR@Coveo.com to discuss your needs.

See more +

Absolutely! This is a question women and under-represented groups ask themselves more often than the rest of the population. Don't underestimate yourself, we are not looking for someone perfect but for someone who is motivated, capable and who will thrive in this position. Allow us to discover you!

Coveo is a Quebec-based company, pioneer in AI-powered search and recommendations. Coveo uses AI technologies and intelligent search to personalize every digital experience for customers, partners, dealers, and employees. Coveo combines unified content, unified interactions behavioral data and machine learning to deliver relevant information and recommendations across every business interaction, making websites, e-commerce, contact centers and intranets efficient, effortless, content-rich, thus boosting conversion.

If it were easy, someone else would have done it. All of our colleagues at Coveo find the drive to continuously seek new challenges and test roads no one else has ever explored. This ethos has allowed us to become a world leader in an innovative industry and to create a collaborative, diverse and trusting place to work filled with amazingly talented and passionate people. We love a good challenge, and we never say no to an opportunity to learn and develop new cutting-edge skills.

In-person
This role requires you to be in the office full-time, whether it be at our Quebec, Montreal, Weert, or London locations. Our modern infrastructures are designed to enhance cross-team collaboration and promote overall well-being.

Hybrid
Our offices in Quebec City, Montreal, London and Weert are designed to foster collaboration and your well-being. We gather there on our pillar days two times a week to strengthen in-person interactions and encourage creativity, all while providing you with the flexibility of a hybrid environment.

Remote
We hire from all over the world because the diversity of backgrounds fuels our continuous innovation. Our benefits will enable you to work comfortably from home, but you may be required to travel to attend our in-person team-building events.