Lead Security Engineer at US Mobile building systems for the 21st century with a focus on fraud prevention and security integration across SDLC.
Responsibilities
Write and review production code in Java, Kotlin, and Go, ensuring security best practices are applied across APIs, backend services, and infrastructure automation — with particular attention to payment processing flows and data integrity.
Perform secure code reviews and guide developers on secure design patterns, embedding fraud-aware coding standards into engineering workflows from the ground up.
Monitor and analyze application and network traffic using tools like Datadog and Cloudflare WAF to identify anomalies, payment abuse patterns, account takeover attempts, and emerging threats across cloud and application environments.
Build and automate security tooling that integrates into CI/CD pipelines for vulnerability scanning, dependency management, and code integrity checks — including controls specific to payment and billing service deployments.
Collaborate with DevOps and backend engineers to design secure architectures, enforce least privilege, and adopt zero-trust principles across subscriber lifecycle flows including onboarding, SIM activation, number porting, and payment processing.
Lead threat modeling, risk assessments, and incident response for fraud and security events — maintaining playbooks, coordinating responses, and translating findings into actionable hardening improvements across Telecom-specific attack surfaces.
Stay current with evolving fraud techniques, exploits, and threat intelligence, proactively applying new research to harden payment systems, detection models, and security tooling against emerging attack vectors.
Requirements
Bachelor’s degree in Computer Science, Software Engineering, or a related field.
7+ years of experience in fraud, cybersecurity, application security, or security engineering — ideally in developer-heavy environments.
Strong software engineering background with hands-on experience in Java, Kotlin, or Go (comfortable reading and writing production code).
Deep understanding of secure software development, API security, and microservices architectures.
Experience integrating security into CI/CD pipelines and cloud-native environments (AWS, GCP, or similar). Understanding of compliance frameworks such as PCI-DSS, SOC 2, or ISO 27001 is a strong plus.
Familiarity with observability and monitoring platforms such as Datadog, Cloudflare WAF, or similar tools for traffic analysis and anomaly detection.
Proficiency with security monitoring and automation tools (SIEM, EDR, IDS/IPS, etc.).
Excellent communication skills and the ability to collaborate with both engineers and leadership.
Certifications like CISSP, OSWE, GCSA, or CISM are a plus but not required — demonstrable coding and analytical ability matter most.
Cybersecurity Student Analyst at TRIUMF focusing on process workflows and automation in cybersecurity operations. Collaborating on security configurations, best practices, and vulnerability management.
Business Development professional focusing on acquiring new clients and developing market strategies at Indigo Consulting in Montreal. Role involves managing B2B sales in cybersecurity and IAM.
AI Security Engineer working at Euna Solutions to assess and mitigate AI/ML - specific security risks. Define and enforce secure AI practices across development cycles while collaborating with engineering teams.
IT Information Security Lead overseeing tech and security initiatives at Mirego. Ensuring compliance and optimizing technical tools for a seamless operation.
POD Manager ensuring food safety, quality, and compliance at various Cargill facilities in Canada. Leading strategic planning and team development in food safety and regulatory compliance.
Key security engineer conducting offensive security techniques to strengthen Instacart's products. Collaborating with cross - functional teams and mentoring for continuous growth.
Senior Technical Project Manager leading FedRAMP compliance for TELUS Health's pension and benefits platform. Collaborate with security, engineering, and compliance teams to build a compliant cloud environment.
Network Security Engineer providing technical support in network operations for Blue Mantis. Involves deployment of technology solutions and troubleshooting network issues.
Junior Cyber Security Developer at BMO managing software development lifecycle and transforming user requirements into features. Collaborating across functional teams and ensuring security compliance within development processes.