Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
About the role
- Staff Security Engineer leading security efforts at AI SaaS company. Collaborating cross-functionally to protect sensitive customer data and products while mentoring engineering team members.
Responsibilities
- Identify and address security risks through comprehensive assessments, mitigation strategies, and execution.
- Ensure secure coding and implement systems to protect against unauthorized access and data breaches.
- Develop and execute incident response plans, conduct forensic analysis, and take preventive measures.
- Maintain compliance with regulations and industry standards, promote transparency, and address ethical concerns.
- Establish real-time monitoring systems, conduct regular assessments, and proactively respond to threats.
- Evaluate and secure third-party integrations to prevent vulnerabilities.
- Educate and raise awareness for security best practices across the engineering team.
- Maintain up-to-date documentation on protocols, incidents, and improvements; report regularly to stakeholders.
- Mentor and guide team members to build security expertise across the engineering organization.
Requirements
- 8+ years in a security-focused engineering role, with hands-on technical architecture, implementation, and oversight experience
- Expertise in SAST/DAST, application security, and CI/CD pipeline integration
- Deep knowledge of AI-specific threats (prompt injection, model poisoning, membership inference, adversarial perturbation, output manipulation)
- Experience implementing security principles, operating system and web application security, and familiarity with the OWASP Top 10 and common threat tactics
- Knowledge of next-generation security technologies (SASE, CASB, RASP)
- Hands-on experience with patch management, software supply chain security, and artifact repositories (e.g., JFrog, Snyk)
- Strong programming or scripting skills in at least one language (e.g., Python, Ruby, Node.js)
- Relevant cybersecurity certification (CISSP, CISM, CISA, CRISC, GIAC, etc.)
- Up-to-date on technology and vulnerability trends; ability to secure cloud computing applications and ecosystems
- Application/infrastructure-level security design experience, including modern mitigation techniques (e.g., DNS-SEC, cryptographic fundamentals)
- Strong automation skills with Python
Benefits
- Choice of medical, dental, and vision insurance plans for you and your family
- Additional insurance coverage options for life, accident, or critical illness
- Flexible paid time off, sick leave, short-term and long-term disability
- 10 US observed holidays, and Canadian statutory holidays by province
- A home office stipend
- 401(k) for US-based employees and RRSP for Canada-based employees
- Paid parental leave
- A local in-person meet-up program
- Hubs in San Francisco and Toronto
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Staff software engineer directing GitLab's AI - assisted static analysis engine and SAST capabilities. Defining program - analysis architecture, trustworthy agent tooling, and security detection quality.
Product Security Specialist strengthening security for Safe Software’s FME data integration platform. Supporting SDLC security, AI governance, vulnerability disclosure, and customer security engagements remotely across Canada.
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
Application Security Developer securing Clio’s AI - powered legal technology platform through .NET development, vulnerability remediation, and automated application security tooling. Hybrid Toronto Hub role.
Senior Security Engineer securing Squads’ stablecoin products, APIs, and infrastructure. Leading threat modeling, code review, vulnerability management, and secure development standards.
Azure Cloud Security Engineer strengthening Azure security, governance, and vulnerability remediation. Supporting ELITS Canada’s digital transformation clients through secure cloud implementation.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.