Security Engineer
Listed on 2026-10-06
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Systems Engineer, Security Management & Operations
Location: Montreal
At Shakepay, we're on a mission to usher in the Bitcoin golden age. We're reimagining financial services to give every Canadian their fair shake.
Our culture is built around doing work that matters, winning as a team, and celebrating success. If you're the kind of person who values growth, shipping fast, and sharing your ideas openly with a group of like-minded people, come and build with us!
About ShakepaySince 2015, we've been on a mission to help Canadians build long-term wealth through bitcoin. Over the past few years, we've expanded beyond buying and selling bitcoin to offer a growing suite of everyday financial products - including the Shakepay Card, direct deposit, bill payments and Interac e-Transfer - making it easier to earn, save and use bitcoin every day. Today, more than 1.5 million Canadians use Shakepay to grow their bitcoin savings and take control of their financial future as we continue to push the boundaries of what modern financial services can look like.
We're regulated as an investment dealer across all Canadian provinces and territories, and backed by renowned venture capitalists with a funding of $44M. We have a passionate, loyal, and growing community, and we're looking for people who want to help us build something truly special.
About the security teamSecurity at Shakepay is a company-wide responsibility, supported by a small, high-impact team focused on protecting our customers, systems, and data while enabling product velocity and business growth.
The Security team works across application and product security, cloud and infrastructure security, enterprise security, security tooling, incident response, and emerging areas such as AI security. We work closely with Engineering, Platform, Risk, Compliance, and Product to build pragmatic controls and scalable security capabilities in a regulated fintech environment.
We're building a modern security function where automation and thoughtful use of AI help us reduce repetitive operational work and increase our impact.
Staff Security EngineerWe're looking for a Staff Security Engineer to help safeguard Shakepay's infrastructure, products, and customer data while levelling up our AI platform, security capabilities, and observability.
In this role, you'll be a hands-on technical contributor across multiple associated security domains, such as application, product, infrastructure, enterprise, and observability. You'll partner closely with engineering teams to design and implement scalable security solutions that balance risk reduction, customer experience, and product growth.
You'll be expected to work in an AI-forward way. Using AI tools, agents, and automation to increase your reach and keep pace with the scope and scale of Security at Shakepay is a core part of the role, not an optional skill. You'll help level up our existing AI platform and apply AI to security engineering, observability, testing, detection, and response.
What you'll be doing- Design and drive security solutions across multiple associated domains, including product, internal applications, infrastructure, enterprise systems, and observability
- Conduct threat modeling for existing systems and new product initiatives
- Partner with engineering teams to embed security into development and delivery workflows
- Build, tune, and automate security alerts, detections, observability, and response workflows, using AI and agents where they can increase scale and effectiveness
- Participate in and help lead incident response as part of the on-call rotation
- Support governance, compliance, and regulatory efforts (SOC 2, ISO 27001, PCI, etc.)
- Mentor engineers and share security best practices across the organization
- Help shape security priorities and technical direction while…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).