Cybersecurity Lead strengthening Irth’s SaaS security program for utility infrastructure operators. Owning vulnerability management, incident response, cloud security, compliance, and customer trust.
About the role
- Senior Security Engineer securing gaiia’s cloud-based telecom operating system. Protecting applications, infrastructure, customer data, and compliance programs across a serverless TypeScript platform.
Responsibilities
- Protect gaiia’s products, infrastructure, customers, and teams through technical execution and pragmatic security leadership
- Perform threat modelling and architecture reviews
- Review authentication, authorization, tenant isolation, sensitive workflows, and secure-development standards
- Run internal penetration tests and work with developers on issue remediation
- Build and maintain a bug bounty program
- Review AWS, Snowflake, GitHub, and other critical vendor configurations
- Improve IAM, least privilege, and production access for employees and cloud resources
- Review logging, detection, cloud-security monitoring, infrastructure-as-code, and deployment pipelines
- Harden data stores, networks, backups, and encryption controls
- Own vulnerability intake, prioritization, remediation SLAs, root-cause tracking, and corrective actions
- Triage security alerts, coordinate investigations, maintain incident-response plans, and conduct exercises
- Maintain policies, controls, evidence, and customer-facing security posture for SOC 2, GDPR, and PCI
- Coordinate auditors and external assessments
- Support Sales with security questionnaires and support the CTO in security-related sales and legal negotiations
- Review vendors’ and subprocessors’ security controls
- Build employee and engineering security training and establish security champions
- Maintain a prioritized security roadmap and report material risks and progress to leadership
- Participate in the long-term plan to build the security team
- Report to the Platform Lead and work closely with the Platform Lead and CTO
Requirements
- At least five (5) years of experience in Software Engineering, Application Security, Infrastructure Security, or a closely related technical role
- Strong experience securing modern web applications, APIs, distributed systems, and cloud infrastructure
- Strong experience with AWS
- Strong experience with the JavaScript / TypeScript ecosystem
- Experience with React
- Experience working with microservices, serverless architectures, infrastructure-as-code, CI/CD pipelines, and production systems
- Strong understanding of authentication, authorization, secrets management, IAM, logging, monitoring, and secure SDLC practices
- Experience with penetration testing, bug bounty programs, SAST, dependency scanning, etc.
- Stellar judgement and pragmatism when making and implementing critical business decisions
- Rigorous, calm, and level-headed approach to incidents, ambiguity, and high-stakes situations
- Impressive communication skills, with the ability to coach, influence, and enable teams without slowing them down unnecessarily
- Ability to prioritize security work based on business impact, customer risk, operational urgency, and engineering feasibility
- Experience reviewing product architecture, identifying practical security risks, and partnering with engineering teams to implement effective mitigations
Benefits
- Competitive pay
- Stock Options Plan
- Group Insurance
- Telemedicine
- Life and Health Spending Accounts
- Group Retirement Savings Plan (RRSP)
- Flexible 25 days vacation
- Flexible working hours
- 100% remote / all-remote work
- Accessible technologies and disability accommodations during the application process
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large - scale technology projects for clients.
FTTH security expert auditing PON, CPE, and telecom infrastructure for P1 Security. Producing penetration - test reports and remediation guidance for critical network security.
Lead security for Duetto's hotel revenue management platform across AWS, DevSecOps, compliance, incident response, and enterprise customer trust. Own the security posture for a global hospitality technology business.
Senior CyberArk engineer strengthening Manulife’s enterprise privileged - access security platform. Automating PAM operations, integrations, resilience, and production support.
Security Engineer building IAM, PAM, and IGA capabilities for Marqeta’s cloud - based embedded finance platform. Automating access controls across AWS, SaaS, DevOps, and AI/ML systems.
Cloud security leader supporting ServiceNow’s AI - native SaaS security and Canadian enterprise customers. Leading customer security engagements, incident investigations, and cloud security improvements.
Senior Consultant leading cyber regulatory remediation for banks, broker - dealers, and insurers. Driving incident response, vulnerability, patch, and IAM workstreams to closure.
Cyber Security Specialist protecting Scarborough Health Network hospitals and healthcare infrastructure. Managing security systems, assessments, vulnerabilities, incidents, and compliance across the Central East Region.
Team Lead protecting Wealthsimple clients through fintech risk, fraud, and security operations. Managing CX specialists, threat response, compliance workflows, and performance delivery.