Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
About the role
- Product Security Engineer at Supabase focusing on integrating security in developer workflows. Collaborating with teams to enhance product security without hindering development speed.
Responsibilities
- Identify and close gaps across application security, secure design review, and vulnerability management.
- Conduct threat modeling, secure design reviews, and code reviews to identify practical remediation paths.
- Partner closely with engineering teams to provide product-focused security expertise and shape a modern security program.
- Mature how we think about security in a developer-first environment, balancing pragmatism with strong technical judgment.
- Distinguish between theoretical risk and material business risk to prioritize security efforts effectively.
- Improve security posture through scalable mechanisms like tooling, automation, secure defaults, and developer-friendly guardrails.
- Support security incident response by helping triage, investigate, and coordinate remediation for product and platform security issues.
- Participate in security on-call rotations, helping respond to urgent security events with clear judgment and calm execution.
- Help manage and mature our bug bounty and vulnerability disclosure processes, including triage, validation, prioritization, and coordination with engineering teams.
Requirements
- Have strong experience in product security, application security, or security engineering.
- Are comfortable working with cloud-native, developer tools, SaaS, platform, or infrastructure products.
- Communicate clearly across both technical and non-technical audiences, especially in a written, asynchronous environment.
- Are energized by solving real-world problems for developers and navigating ambiguity while moving quickly.
- Possess a deep understanding of application security fundamentals, including auth, session management, APIs, and secrets handling.
- Have experience with vulnerability triage, bug bounty programs, responsible disclosure, or security incident response.
- Are comfortable participating in potential security on-call rotation and can balance urgency, risk, and practical remediation.
- Have experience with or interest in Postgres, Kubernetes, or building security guardrails that enable rather than enforce.
Benefits
- Fully Remote
- ESOP
- Tech Allowance
- Health Benefits
- Annual Off-Sites
- Flexible Work
- Professional Development
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Staff software engineer directing GitLab's AI - assisted static analysis engine and SAST capabilities. Defining program - analysis architecture, trustworthy agent tooling, and security detection quality.
Product Security Specialist strengthening security for Safe Software’s FME data integration platform. Supporting SDLC security, AI governance, vulnerability disclosure, and customer security engagements remotely across Canada.
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
Application Security Developer securing Clio’s AI - powered legal technology platform through .NET development, vulnerability remediation, and automated application security tooling. Hybrid Toronto Hub role.
Senior Security Engineer securing Squads’ stablecoin products, APIs, and infrastructure. Leading threat modeling, code review, vulnerability management, and secure development standards.
Azure Cloud Security Engineer strengthening Azure security, governance, and vulnerability remediation. Supporting ELITS Canada’s digital transformation clients through secure cloud implementation.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.