Staff Security Engineer securing Shakepay’s bitcoin financial - services platform and customer data. Advancing AI - driven security, observability, threat modeling, and incident response for Canadian users.
About the role
- Ingénieur sécurité principal protégeant l'infrastructure, les produits et les données de Shakepay, plateforme canadienne de services financiers bitcoin. Automatisation, IA, détection et réponse aux incidents.
Responsibilities
- Design and lead security solutions across product, internal applications, infrastructure, enterprise systems, and observability
- Perform threat modeling for existing systems and new product initiatives
- Collaborate with engineering teams to integrate security into development and delivery workflows
- Create, refine, and automate security alerts, detections, observability, and response workflows using AI and agents
- Participate in incident response and help lead incidents as part of the on-call rotation
- Support governance, compliance, and regulatory efforts, including SOC 2, ISO 27001, and PCI
- Mentor engineers and share security best practices
- Help define security priorities and technical direction
- Build strong relationships with internal stakeholders and external security vendors
- Protect Shakepay’s infrastructure, products, and customer data while advancing its AI platform, security capabilities, and observability
Requirements
- 8+ years of experience in security engineering, software engineering, or a related technical discipline, with significant security experience
- Strong technical expertise in one or more areas of security, with the ability to contribute effectively across related domains
- Advanced hands-on experience using AI tools, agents, and automation to increase the scale and effectiveness of security engineering work
- Experience working in cloud environments, preferably AWS
- Hands-on experience with incident response and on-call rotations
- Excellent communication skills, sound technical judgment, and a strong sense of ownership
- Fluency in English required
- Assets include: experience in fintech, cryptocurrency, or regulated environments; product security expertise; AI-assisted security testing, offensive security, vulnerability research, detection engineering, or security observability experience; knowledge of Bitcoin; and proficiency with Git/GitHub
Benefits
- Stock options as part of the total compensation package
- Quarterly performance and compensation reviews
- Medical and dental coverage, including health and wellness spending accounts
- Work from anywhere in Canada, with optional access to offices in Montreal and Toronto
- Annual $2,000 budget for courses, certifications, and training
- 20 vacation days per year
- $1,000 bonus for taking all vacation days
- Parental leave top-up to 100% of salary for 18 weeks
- Quarterly team or company-wide gatherings
- Performance-based salary increases
- Paid time off
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Application Security Researcher advancing AI - driven application security from prompt to production. Building detection systems and autonomous agentic penetration - testing capabilities.
Senior UX designer supporting PwC Canada’s customer transformation engagements. Designing Salesforce Experience Cloud portals, journeys, prototypes, and accessible digital experiences.
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.