Sr Software Developer (Cybersecurity)

Job Responsibility: Ceridian is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region. Our brand promise - Makes Work Life Better™ - is the commitment we make to our employees, our customers and their employees, our partners, and to the communities we operate in around the world. As the pace of change accelerates, our modern technologies help our customers adapt, evolve, and win in today's borderless, flexible, and skills-based work world. Dayforce is Ceridian's award-winning cloud HCM platform. Its single solution, single database, and single continuous calculation engine helps customers achieve increased efficiencies, productivity, and best-in-class compliance. Dayforce is the people platform for the global workforce. Location: Work is what you do, not where you go. For this role, we are open to remote work and can hire anywhere in the United States or Canada. About the opportunity The Ceridian Product Security team is responsible for the security of Ceridian products. We enhance product security via finding, fixing, and preventing security flaws across the Ceridian family of products, including Dayforce HCM, Dayforce Wallet, and others. On the Product Security teams, we build the tools and run the programs which improve security of our people's first cloud platform. Beyond simply pointing out issues, we solve problems through close partnership with product, development, and CloudOps teams. As such, we are looking for a Sr Software Developer with strong technical & leadership skills, a background in platform, infrastructure, and cloud security as well as automation. You will have a passion for solving complex product security challenges in a fast-moving agile environment. You should be comfortable working across the company and enjoy finding innovative ways to mitigate risk while protecting the data of more than five million users of Ceridian products. What you'll get to do

• Participate in the entire lifecycle of our software including design, analysis, prototyping, development, testing and support of our products
• Work closely and collaborate with clients, prospects, implementation partners, and Dayforce team members to envision and deliver required functionality
• Conduct code reviews of peer work and mentor other developers
• Receive input, design, test and deploy solutions supporting automation and agile methodology, while adhering to security principles designed to protect against vulnerabilities and threats targeting web-based services
• Document and maintain policies and standard operating procedures aligning with comprehensive security practices, standards, application and host integrity, and security principles and best practices
• Develop and implement workflows to update and maintain configurations across protected applications and infrastructure, which includes on-premises and cloud service providers (Azure, AWS)
• Automate using a variety of tools that support rapid implementation and dynamic delivery
• Develop and compile high-quality code that passes validation testing and provides capabilities expected by stakeholders and customers
• Create and use CI/CD integrations, including code management systems, with expectations to build and rapidly deploy to on-premises and cloud-hosting platforms
• Guide teammates and automate manual security testing activities through CI/CD practices
• Cooperate with team members to design, develop and modify architecture components and application interfaces, while maintaining integrity and security
• Deliver automated security testing supporting integrations, performance obligations and regression requirements
• Develop and deploy applications in container services, such as Docker and Kubernetes
• Work with security team members to enforce thorough application inventory and management standards and audit compliance for applications and services under corporate policies
• Liaison with security and technology teams to understand infrastructure, vulnerability management, data protection and least privilege principles
• Regularly report to security leadership on automation security posture supporting defined metrics and SLAs
• Have professional accountability to remain educated on threat landscape and automation tools
• Perform other duties as assigned

What's in it for you Encouragement to be the best version of yourself at and away from work:

• YOUnity diversity and inclusion programs
• Amazing time away from work programs
• Support for your total well-being through our Live Well, Work Well programs targeting all aspects of your life
• Recognition for your contributions through excellent pay, perks, and rewards
• Giving where you're living: volunteer days, Ceridian sponsored events, and our very own charity, Ceridian Cares
• Opportunities to fuel your career growth through numerous internal and external programs and events

Skills and experience we value

• Bachelor's degree in computer science or equivalent
• Strong experience in software development, DevOps or technical cybersecurity role
• Proficient in scripting, automation, and application development in multi-tier systems, using RESTful APIs
• Advanced understanding and proficiency with applications, databases, web services, authentication, and middleware servers
• Experienced with one or more of the following: Terraform, Arm, Git Actions, ADO (Azure DevOps) Pipelines, Chef, Puppet, Ansible, Jenkins, CloudFormation
• Experienced with container services, such as Kubernetes and Docker
• Working knowledge of Git, React and Angular frameworks
• Ideally familiar with one or more of the following: ISO 27001, NIST, CSF (Cybersecurity Framework), ITIL, CMMC
• Aptitude with one or more scripting languages (e.g., Python, PowerShell, C#, JavaScript, Go, TypeScript and Bash)
• Track record acting with integrity, taking pride in work, seeking to excel, and being curious and flexible
• Strong written and oral communication skills across varying levels of the organization
• Organized with the ability to prioritize and complete tasks within defined SLAs
• Excellent judgment and the ability to make quick decisions when working with complex situations

What would make you really stand out

• Certifications - Not required, but preferably one or more of the following: GCSA, GSEC, CISSP, Azure.

Ceridian is fueled by the diversity of our talented employees. We are an equal opportunity employer and consider and embrace ALL individuals and what makes them unique. We believe our employees should be happy and healthy, with peace of mind and a sense of fulfillment. We provide our employees with comprehensive benefits for various life circumstances and needs, great opportunities for career development, and a balanced lifestyle to achieve personal and professional success. We encourage all individuals to apply for positions that fit their passions. We thank all applicants in advance for their interest in this position; however, only those selected for an interview will be contacted. About the Salary Ranges Please note that the salary range mentioned in this should serve simply as a guide. The final compensation offered may vary based on a variety of factors, including bonuses and/or incentives, or a candidate's experience, skills, and location. Our company is committed to providing a fair, equitable, and competitive package that reflects the value an individual brings to the organization. The range provided is in Canadian Dollars. Fraudulent Recruiting Beware of fraudulent recruiting activity! If you are contacted by a Ceridian Recruiter or other Ceridian employee, you will be provided with an @ceridian.com email. If you are contacted by someone who uses any other email domain, despite their use of our company logo or company name in their social media handle/profile, the contact could be fraudulent. Please also note, Ceridian will not request or send money and/or a check at any time during the recruiting or hiring process, ask you to order any equipment or supplies, or ask for any sensitive personal data, such as National ID numbers, via email or phone. Sensitive personal data is only collected post-hire, via new hire forms directly in Dayforce. If you have been asked for any of the above, or believe you have been contacted by someone posing as a Ceridian employee, please refer to our fraudulent recruiting statement found here: