Staff Software Engineer, Security

Overview  Staff Software Engineer, Security at  This range is provided by  Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.
Base pay range  CA$/yr - CA$/yr
About   We started  to help maximize lives – both the lives of our customers and the lives of our team – so that everyone can experience all that life has to offer. For our employees, our promise is that  is more than just a job; it’s an opportunity to unlock one’s potential, where learning is celebrated and impact is realized. We are more than a fast-paced, high-growth tech company;

we care about our people and take career progression seriously. This is your career and our aim is to supercharge it through the people, the work, and the programs that fuel who we are.
About

The Role  We re looking for a Staff level Security Engineer to join our Security & Privacy team. You ll act as a company-wide subject matter expert and key advocate for the security of our product. You ll directly manage and mentor a small group of engineers. You ll operate within an Agile team, collaborate with engineering and IT leadership to influence strategy, and be directly accountable for meaningfully improving the security of our product.

You’ll operate with significant autonomy when setting direction and executing on work. You ll act as a technical mentor across the engineering organization to advance the company s security skills. This role is primarily a mix of strategic and hands-on work, with some people management responsibility, and reports to the Senior Director of Infrastructure within the Engineering department, and collaborates closely with the Head of IT.
About The Team  The Security & Privacy team at  is a cross-functional Mission-Aligned-Team composed of both engineering and IT security professionals. We re responsible for application security, incident response, customer privacy, controls compliance, and security-operations. We work closely with product engineering to find and resolve vulnerabilities, leverage the latest in AI technologies, and act as the trusted point of contact for all security questions.
About You  You re an experienced application Security Engineer with the technical depth and breadth to raise our security org to the next level. You thrive in fast, remote, ambiguous, high-initiative, high-ownership environments. You re interested in both defining strategy and executing on it. You’re capable of diving deep into architecture, code, and infrastructure to drive meaningful improvements. You ve led or mentored other engineers and are comfortable being the company’s authority on technical security decisions.

You communicate clearly, collaborate across teams, influence across functions, and have high standards for technical excellence.
What you ll be working on   Driving accountability and ownership of application security concerns company-wide, ensuring the resolution of findings, and meeting strategic objectives.
Directly manage 1-2 software security engineers including security interns
Identify, scope, prioritize, and often individually execute on high-impact security work. Mentor and unblock members of your team and core product software engineers outside the team
Architect complex security solutions and contribute to our long term security roadmap
Deliver continuous business value through App Sec, Dev Sec Ops  and other security project work. This includes coding, deployment, incident response, evangelization, and long term adoption
Act as a trusted point of contact for security questions and issues, owning the process of responding to and ensuring the remediation of security-related inquiries and incidents
Monitor industry trends and major security developments, ensuring we re quick to respond
Our Technology   State-of-the-art architecture powered by Node and Python microservices and React frontend
Postgres for storage, Redis for caching, and Snowflake for data warehouse
Gitlab for version control and CI/CD; infrastructure hosted on AWS with Kubernetes, RDS, etc
Monitoring and automated alerting with Datadog
Amplitude, Hotjar, and Log Rocket for client-side metrics and experimentation
Material…