Senior Security Engineer

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Senior Security Engineer in Canada.

This role sits at the core of securing large-scale cloud infrastructure, AI systems, and product surfaces within a fast-moving, high-impact technology environment. You will identify critical security risks across complex systems and design scalable mitigation strategies that improve the overall security posture of the platform. Working closely with engineering teams, you will help embed secure-by-design principles into product development and infrastructure decisions. The role requires a balance of deep technical security expertise and strong collaboration skills to influence engineering practices across the organization. You will also contribute to building frameworks, tools, and processes that enable safer and more efficient development at scale. This is a high-ownership position where your work directly reduces systemic risk and strengthens product trust for millions of users.

Accountabilities:

• Identify, assess, and prioritize security risks across cloud infrastructure, AI systems, and product surfaces.
• Design and implement scalable remediation strategies with clear, actionable roadmaps to address systemic vulnerabilities.
• Conduct in-depth code reviews and architecture/design reviews to ensure secure engineering practices.
• Develop frameworks, tools, and systems that promote secure development patterns across engineering teams.
• Drive cross-functional initiatives to improve security posture and reduce risk exposure at scale.
• Perform root cause analysis and variant analysis to identify and eliminate classes of vulnerabilities.
• Mentor and guide engineers on secure coding practices, threat modeling, and vulnerability prevention.

Requirements:

• 5+ years of experience in Security Engineering, Application Security, or Offensive Security roles.
• 3+ years of experience conducting code reviews and architecture/design security assessments.
• Strong understanding of common security vulnerabilities, attack vectors, and mitigation techniques.
• Solid knowledge of SaaS architectures, cloud environments, and modern threat modeling practices.
• Experience with root cause analysis, variant analysis, or secure development frameworks.
• Ability to design scalable security solutions and influence engineering practices across teams.
• Strong analytical and problem-solving skills with a proactive, risk-driven mindset.
• Excellent communication skills and ability to collaborate across engineering and product teams.
• Experience with security research, bug bounty programs, or open-source contributions is a plus.

Benefits:

• Competitive base salary ranging from $196,000 – $207,000 CAD, depending on experience and location.
• Equity grants and annual refresh awards as part of total compensation.
• Remote-first work model with flexibility to work from home or other locations within eligible provinces.
• Comprehensive health, dental, and vision insurance coverage.
• Strong focus on work-life balance with flexible working arrangements.
• Opportunity to work on large-scale systems impacting millions of users globally.
• Career growth in a high-impact, security-focused engineering environment.
• Inclusive and collaborative culture with strong emphasis on learning and mentorship.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1