Security Engineer building agentic AI workflows and evaluation frameworks for Spotify’s vulnerability management platform. Improving automated security fixes for developers across the music - streaming business.
About the role
- Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Responsibilities
- Lead and mature the Product Security function at 1Password
- Set strategy, build and scale programs, and partner with engineering, product, and security leadership to reduce risk while enabling innovation
- Oversee Application Security and the software development lifecycle program
- Lead Data and Device Security, including cryptography, cryptographic libraries, secrets management, security libraries, frameworks, vulnerability remediation, and security standards
- Build and mature Privacy Engineering systems, controls, data management practices, and compliance
- Oversee Security Research activities, identify emerging threats and attack vectors, drive original research, and publish findings responsibly
- Manage and develop a team of security professionals and managers through 1-1s, performance feedback, career development, and hiring
- Define and drive company-wide Product Security strategy and establish metrics, reporting, and dashboards
- Develop secure coding practices, threat modeling, security reviews, and code analysis with emphasis on AI adoption
- Embed security into the SDLC and CI/CD pipelines from design to deployment
- Partner with Product, Engineering, Security, executives, and board-level stakeholders to balance security with business priorities
- Serve as a trusted advisor to the CISO and report directly to the CISO
- Represent Product Security in executive and board-level discussions
- Mentor and develop a high-performing security team
- Engage with the broader security community and bring research insights into product security programs
Requirements
- 9+ years of progressive experience in security, with at least 5+ years leading security teams/programs at scale
- Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or related fields; or equivalent work experience
- Deep expertise in Application Security, Privacy, and Secure SDLC programs
- Experience overseeing Security Research activities and engaging the security research community
- Strong track record of embedding security and privacy into engineering processes and influencing product development
- Proven experience leading security teams in high-growth technology or security-focused companies
- Excellent communication skills with ability to convey complex security issues to technical and non-technical stakeholders, including executives and boards
- Experience leading security initiatives that support and/or incorporate AI capabilities
- Demonstrated software development experience with Go, Ruby on Rails, shell scripting, Python, or other languages
- Experience collaborating across internal business or engineering units, external incident response teams, and research teams
- Thought leader with visibility in the security community, including public speaking, open-source contributions, or bug bounty engagement (a strong plus)
- Ability to foster psychological safety and stability in high-stress environments
Benefits
- Health benefits
- Dental benefits
- 401k
- RRSP
- Generous paid time off
- Equity grant
- Incentive programs
- Maternity and parental leave top-up programs
- RSU program for most employees
- Retirement matching program
- Free 1Password account
- Paid volunteer days
- Peer-to-peer recognition through Bonusly
- Remote-first work environment
- In-person engagement, including offsites, team meetings, and customer/industry events
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Avaya Aura security remediation consultant securing enterprise voice environments for Canadian clients. Applying Service Packs, hardening systems, and documenting production changes.
Desjardins security advisor managing ServiceNow SecOps and enterprise vulnerability management. Assessing risks, prioritizing remediation, and guiding IT and business stakeholders.
DNS and email security advisor at Desjardins, a financial cooperative. Deploying DNS, email security, and domain safeguards while troubleshooting complex infrastructure issues.
Staff Software Engineer leading backend architecture for Coalition Control, a cybersecurity risk platform. Building secure distributed services and mentoring Security Engineering teams across Canada.
IT Security Engineer owning identity, endpoint, email, and access controls. Protecting Alpaca’s global brokerage infrastructure and supporting security incident response.
Head of Security protecting Helius’s Solana developer platform and critical infrastructure. Owning incident response, cloud security, compliance, and security - team growth.
Senior Security Specialist protecting BDO Canada’s enterprise systems through threat detection, incident response, and vulnerability management. Supporting security operations across blended office, client - site, and virtual environments.
Cybersecurity Lead strengthening Irth’s SaaS security program for utility infrastructure operators. Owning vulnerability management, incident response, cloud security, compliance, and customer trust.
AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large - scale technology projects for clients.