Lead security engineering team at Float, focusing on application security and DevSecOps. Collaborate across teams to enhance security practices and ensure safe feature delivery.
Responsibilities
Build, mentor, and lead a high-performing security engineering team with a strong emphasis on Application Security and DevSecOps.
Develop and execute the security engineering roadmap, balancing long-term architecture with near-term delivery needs.
Partner with engineering and product leadership to ensure security is integrated into planning, design, and execution.
Own and enhance CI/CD and developer-workflow security, including OIDC signing, pipeline hardening, artifact integrity, secret distribution, and container security.
Define secure architecture patterns and baseline configurations for cloud services, backend systems, and infrastructure-as-code (Terraform).
Build scalable, measurable controls that enforce least privilege and prevent misconfigurations.
Embed secure SDLC practices across engineering through automated code scanning, dependency scanning, secrets management, and threat modeling.
Develop secure patterns for authentication, authorization, API design, and sensitive data handling.
Support engineers in evaluating high-risk features and designing effective mitigation strategies.
Partner with Infrastructure and Operations teams to mature detection and response capabilities, including alerting, logging, tuning, and automation.
Lead incident response readiness through simulations, playbooks, and post-incident improvements.
Automate vulnerability management, cloud posture monitoring, and compliance evidence collection for SOC 2 and PCI DSS 4.0.
Partner with IT to maintain strong endpoint, identity, and device-trust baselines across the organization.
Support third-party risk management efforts as they relate to application and platform security.
Requirements
Experience leading security engineering teams with a strong focus on Application Security and DevSecOps, and exposure to infrastructure and operational security.
Strong technical depth in AWS security, IAM, network design, CI/CD hardening, and cloud-native architectures.
Hands-on experience with infrastructure-as-code, cloud posture tooling, and vulnerability management workflows.
Deep understanding of secure software development practices and common application-layer risks (e.g., OWASP Top 10).
Familiarity with PCI DSS 4.0, SOC 2, and automating evidence or control enforcement.
Experience with identity platforms such as Auth0, Okta, and OIDC.
Proficiency in scripting (Python preferred) for automation, metrics, and integrations.
Excellent communication and stakeholder management skills.
Experience in fintech, payments, or other correctness-critical domains is strongly preferred but not required.
Benefits
Competitive compensation, equity options, and benefits
Hybrid work model – we are based in Toronto with in-office days for connection and collaboration
Enjoy catered team lunches every Tuesday, Wednesday and Thursday
Bring your pup to our dog-friendly office
Thrive in a high-trust, high-performance culture where your work truly matters
🚨 We’re Hiring: Manufacturing Operations Manager 📍 Vaughan / North York, ON | On - site What we’re looking for: - 3+ years of operations/supervisory leadership -
About the job SOTI is committed to providing its employees with endless possibilities; learning new things, working with the latest technologies and making a di
Engineering Manager leading full - stack engineering teams at Manulife, a global financial services provider. Guiding technical delivery, architecture, cloud development, and team growth.
Lead the PennyLane Core Quantum Software team at Xanadu, managing 7 - 10 developers to build features and improve performance of the open - source quantum computing framework.
Software engineering manager leading distributed Payments teams at Phreesia, a healthcare SaaS company. Delivering secure, reliable payment products while managing people, projects, testing, and cloud - based systems.
Engineering Manager leading distributed teams improving Mozilla Firefox Desktop user experiences. Driving frontend innovation, quality software delivery, and cross - functional collaboration for an open - source browser.
PointsBet Canada is hiring an HR Manager for a 12 - month contract with potential to become long - term. The role requires a proactive, energetic, and collaborative HR professional passionate about people.
Manage secured and unsecured collections portfolios, monitor delinquency trends, and execute strategies to optimize performance and customer experience.