IT Security Officer overseeing information security for Desjardins’ property and casualty insurance sector. Managing risks, vulnerabilities, suppliers, complex projects, and executive security reporting.
About the role
- Staff Product Security Engineer securing Phantom’s self-custodial multi-chain crypto wallet. Assessing vulnerabilities, leading security projects, and integrating protection across development and platform teams.
Responsibilities
- Perform regular security assessments on new projects, infrastructure and code
- Identify and mitigate vulnerabilities in code, systems and networks through manual testing, automated tools, threat modeling and threat intelligence
- Monitor offensive security techniques, application security threats and blockchain security best practices; recommend security posture improvements
- Write detailed findings reports and present them to management and technical teams
- Help prevent real-world attacks
- Work with development teams on secure coding practices and cryptographic function integrity
- Collaborate with development and platform teams to integrate security across the organization
- Participate in incident response and incident management
- Lead large cross-team projects
Requirements
- 7+ years of experience in offensive security techniques, with a focus on blockchain technology and cryptography
- Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications
- Proficient in code review for JavaScript & Typescript
- Strong understanding of application security threats and offensive security techniques
- Ability to write PoCs to prove vulnerabilities
- Ability to review patch code against repository owner and maintainer standards
- Strong analytical and problem-solving skills
- Good verbal and written communication skills
Benefits
- Competitive salary and equity
- Comprehensive insurance (medical/dental/vision) — 100% covered
- Stipend for your ideal remote set-up
- Flexible hours and a supportive remote environment
- Unlimited vacation
- 401(k) retirement plan
- Monthly wellness benefit
- Weekly meal benefit
- Global off-sites
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Azure SA&A Specialist supporting Government of Canada security assessments, controls, evidence, and testing. PLATO delivers Indigenous - owned software testing and technology services across Canada.
Senior Security Engineer owning identity, IT automation, and cloud security for Maze, a user research platform. Driving vulnerability management, compliance, and secure infrastructure at scale.
Product Security Engineer securing WorkOS developer tools and APIs for enterprise authentication and identity. Leading secure design, offensive testing, tooling, and vulnerability remediation.
Senior Manager leading BDO Canada’s cybersecurity governance, risk, and compliance programs. Overseeing audits, vendor risk, security policies, regulatory compliance, and GRC team leadership.
Security Operations Analyst monitoring and protecting Flexspring's HR data integration platform and cloud infrastructure. Managing vulnerabilities, incident response, detection tooling, and SOC 2/ISO 27001 evidence.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Senior Security Engineer protecting Kin’s cloud - based homeowners insurance platform. Owning endpoint detection, AWS security, identity controls, and incident response.
Remote HSE Specialist supporting JLL’s Canadian property - management operations. Managing compliance, investigations, audits, training, and environmental and safety programs.
Cybersecurity co - op protecting TD’s banking technology, data, and fraud systems. Testing security solutions, operating tooling, and mitigating cyber and technology risks.