Lead Security Engineer

About Us

Think about your last hotel stay. Did you skip the front desk line with mobile check-in? Message the staff for extra pillows? Order a late-night snack with a tap on your phone?
Then you’ve likely run into Canary in the wild.

Canary Technologies is the leading agentic AI platform for hotel and guest management, powering the digital infrastructure for more than 20,000 hotels in 125+ countries. The world's most renowned hospitality brands, including Marriott International, Four Seasons and Wyndham Hotels & Resorts, partner with us to increase revenue, improve operations and elevate the guest experience.

We’ve executed the largest deployment of autonomous AI systems in hospitality, building technology that fundamentally redefines how guests and hotels interact. It’s made us one of the top-funded hotel technology companies in the world, with nearly $200M raised to date.

Canary has been recognized as a 2024 and 2025 Deloitte Technology Fast 500™ company, Inc. 5000 fastest-growing company, and swept the 2026 Hotel Tech Awards , including Best Place to Work, #1 Guest Experience Platform, and the Hotelier’s Choice Award. We’re scaling our team to bring innovation to life faster than ever.

We're growing quickly, and we're looking for people who are passionate about their work, want to grow with us and are ready to take on more responsibility along the way. We value rigor and velocity in equal measure: high standards, fast pace, real ownership. If that's the environment you're looking for, this is the place for you.

Come join us! Let’s shape the future of hospitality together.

Canary Technologies is hiring a Lead Security Engineer to lead our Security team within the Platform organization. This is a player-coach role: you'll manage and grow a small team of security engineers while owning Canary's security and compliance program end to end, including our control framework, audits, policies, and risk posture across a platform that handles guest data and payments for thousands of hotels worldwide.

You'll also be Canary's primary security voice to customers, partners, and auditors, translating our security posture for everyone from a hotel group's CISO to our own executive team. You should be as comfortable running an audit and presenting to a customer's security team as you are reviewing a threat model with engineers.

• Lead, coach, and grow the Security team, including hiring, performance, priorities, and career development
• Own Canary's security and compliance program (SOC 2, PCI DSS, GDPR/CCPA, and other applicable frameworks)
• Serve as the primary security point of contact for Canary
• Own vendor and third‑party risk management
• Write, maintain, and communicate security policies and standards company-wide; run security awareness and training
• Set technical direction for security tooling and stay hands‑on in architecture and threat-model reviews

• 8+ years in security engineering, including 2+ years leading a team as a manager or tech lead
• Proven experience owning compliance programs end to end (SOC 2 Type II, PCI DSS, ISO 27001, or similar)
• Exceptional written and verbal communication
• Hands‑on technical foundation in cloud security (AWS), identity and access management, application security, and vulnerability management
• Experience with vendor risk management and reviewing security terms in customer and vendor contracts
• Track record of building pragmatic, risk‑based security programs at a growth‑stage SaaS company
• Nice to have: hospitality, fintech, or payments industry experience; CISSP, CISM, or CISA

We work hard to make Canary a fun, rewarding, and high‑energy place to work. Here’s how we take care of our flock:

• Unlimited PTO: Take the…