Lead security engineering team at Float, focusing on application security and DevSecOps. Collaborate across teams to enhance security practices and ensure safe feature delivery.
Responsibilities
Build, mentor, and lead a high-performing security engineering team with a strong emphasis on Application Security and DevSecOps.
Develop and execute the security engineering roadmap, balancing long-term architecture with near-term delivery needs.
Partner with engineering and product leadership to ensure security is integrated into planning, design, and execution.
Own and enhance CI/CD and developer-workflow security, including OIDC signing, pipeline hardening, artifact integrity, secret distribution, and container security.
Define secure architecture patterns and baseline configurations for cloud services, backend systems, and infrastructure-as-code (Terraform).
Build scalable, measurable controls that enforce least privilege and prevent misconfigurations.
Embed secure SDLC practices across engineering through automated code scanning, dependency scanning, secrets management, and threat modeling.
Develop secure patterns for authentication, authorization, API design, and sensitive data handling.
Support engineers in evaluating high-risk features and designing effective mitigation strategies.
Partner with Infrastructure and Operations teams to mature detection and response capabilities, including alerting, logging, tuning, and automation.
Lead incident response readiness through simulations, playbooks, and post-incident improvements.
Automate vulnerability management, cloud posture monitoring, and compliance evidence collection for SOC 2 and PCI DSS 4.0.
Partner with IT to maintain strong endpoint, identity, and device-trust baselines across the organization.
Support third-party risk management efforts as they relate to application and platform security.
Requirements
Experience leading security engineering teams with a strong focus on Application Security and DevSecOps, and exposure to infrastructure and operational security.
Strong technical depth in AWS security, IAM, network design, CI/CD hardening, and cloud-native architectures.
Hands-on experience with infrastructure-as-code, cloud posture tooling, and vulnerability management workflows.
Deep understanding of secure software development practices and common application-layer risks (e.g., OWASP Top 10).
Familiarity with PCI DSS 4.0, SOC 2, and automating evidence or control enforcement.
Experience with identity platforms such as Auth0, Okta, and OIDC.
Proficiency in scripting (Python preferred) for automation, metrics, and integrations.
Excellent communication and stakeholder management skills.
Experience in fintech, payments, or other correctness-critical domains is strongly preferred but not required.
Benefits
Competitive compensation, equity options, and benefits
Hybrid work model – we are based in Toronto with in-office days for connection and collaboration
Enjoy catered team lunches every Tuesday, Wednesday and Thursday
Bring your pup to our dog-friendly office
Thrive in a high-trust, high-performance culture where your work truly matters
Site Engineering Manager advancing Mantel’s molten - salt carbon capture demonstration project. Managing field execution, commissioning, and performance validation for industrial decarbonization.
Site Engineering Manager delivering Mantel’s molten - salt carbon capture demonstration project. Coordinating field engineering, commissioning, contractors, and performance validation in Quebec.
Senior Engineering Manager leading OLO’s guest ordering, experimentation, and menu - quality systems. Owner’s AI platform helps local restaurants grow revenue and operate digitally.
Software Development Manager leading 5 - 6 developers at MaintainX, a mobile - first industrial work execution platform. Delivering reliable reporting, identity, access, or search products.
Engineering Manager leading Platform IAM engineers at Akamai, which powers secure cloud and edge services. Driving architecture, delivery, mentorship, and high - performing team development.
Engineering Manager leading backend services, APIs, and distributed systems for Slice’s technology platform supporting local pizzerias. Building high - performing teams and improving customer and engineering outcomes.
Engineering Manager leading Warner Music Group’s Forward Deployed Engineering team. Driving secure AI automation, reusable tooling, and business - unit delivery across the music company.
Engineering Manager leading a small team building Spellbook’s AI copilot for transactional lawyers. Driving technical direction, product delivery, and effective use of coding agents.