Staff Product Security Architect securing GitLab’s DevSecOps orchestration platform. Driving architecture, threat modeling, prototypes, and systemic risk reduction across engineering.
About the role
- Senior Security Engineer enhancing cybersecurity capabilities across multiple domains for EverCommerce. Collaborating with various teams to improve security posture in a growing environment.
Responsibilities
- Design, implement, improve, and help operationalize security controls across the enterprise.
- Partner with leadership to mature cybersecurity capabilities and support long term security architecture.
- Lead or contribute to security initiatives across key domains, including:
- Identity and access management
- Endpoint security
- Network & cloud security
- Data security
- Vulnerability and exposure management
- Logging, detection, and response enablement
- Evaluate current state security controls, identify gaps, and recommend practical, risk-based improvements.
- Help define and document security standards, architecture patterns, design decisions, and implementation guidance.
- Support implementation, integration, tuning, and lifecycle management of security technologies across the stack.
- Work cross functionally with technical and non technical stakeholders to ensure security controls are effective, scalable, and aligned with business needs.
- Help establish repeatable processes, technical standards, and strong engineering discipline across the security program.
- Contribute to a security culture that is collaborative, pragmatic, and focused on enabling the business while reducing risk.
Requirements
- Strong hands on experience in security engineering, including implementation, administration, and improvement of security controls
- Broad and deep experience across most security domains
- Experience implementing and supporting security tools and controls, not just advising on them
- Ability to move between tactical engineering work and higher-level architectural thinking
- Interest in architecture, with experience in technical design, documentation, standards, or best practice development
- Strong judgment in balancing security risk, business needs, and practical execution
- Experience working in environments where security is still maturing is highly valued
Benefits
- Flexibility to work where/how you want within your country of employment – in-office, remote, or hybrid
- Day 1 access to a robust health and wellness benefits package, including an annual wellness stipend.
- RRSP with up to a 4% match and immediate vesting
- Flexible and generous (FTO) time-off
- Employee Stock Purchase Program
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Information Security Manager leading enterprise EUC governance technology deployment and product roadmaps at TD, a global financial institution. Driving risk controls, adoption, delivery and assurance across business segments.
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI - enabled platforms. Establishing cloud, Kubernetes, identity, and software - delivery security standards across USA and Canada.
Cyber Security Engineer auditing diverse codebases, fixing vulnerabilities, and optimizing backend software. Contributing security insights and improvements to AI training datasets for a technology company.
Senior Associate designing cloud, application, and AI security solutions for PwC Canada’s consulting clients. Leading technical delivery pods and embedding DevSecOps across client environments.
Cybersecurity generalist protecting PwC Canada client systems and data. Addressing vulnerabilities and security challenges across Toronto and London.
Application Security Researcher building autonomous application - security capabilities for OX Security. Researching attack paths, AI models, and detection engines from prototype through production.
Managing Norfolk County’s cybersecurity, disaster recovery, incident response, and security projects. Supervising IT security staff and protecting municipal systems, services, and information.
Information Security Compliance Specialist securing Docebo’s AI - powered learning platform. Driving customer trust, audit readiness, compliance responses, and vendor risk management.
IT Security Officer overseeing information security for Desjardins’ property and casualty insurance sector. Managing risks, vulnerabilities, suppliers, complex projects, and executive security reporting.