This is a fully remote position, open to applicants in Canada.

📋 Description

• Develop and enhance security measures across the product, backend, and infrastructure.

• Assess code, architecture, and infrastructure for potential security vulnerabilities.

• Conduct vulnerability assessments, penetration testing, and security audits.

• Troubleshoot and resolve security issues within backend systems.

• Oversee bug bounty triage and remediation processes, including those on HackerOne.

• Automate security checks, alerts, and vulnerability management workflows.

• Collaborate with engineering teams to foster secure coding practices.

• Assist with incident response and security investigations.

• Configure and manage security tools such as firewalls, IDS/IPS, scanners, and monitoring systems.

⛳️ Requirements

• Over 3 years of experience in security engineering, backend security, or infrastructure security.

• Proficient backend development skills with Node.js/TypeScript.

• Capable of delivering code from start to finish.

• Solid understanding of authentication, authorization, cryptography, and prevalent vulnerabilities.

• Familiarity with security tools like GitHub Advanced Security, Dependabot, CrowdStrike, Falco, or equivalent.

• Experience in cloud security, preferably with GCP or AWS.

• Knowledge of Kubernetes, Docker, and contemporary infrastructure security practices.

• Strong problem-solving abilities and excellent communication skills.

🏝️ Benefits

• Competitive salary.

• Opportunity to work remotely from anywhere within your country.

• Possibility for lateral movement within teams and rapid career growth.

• Paid time off along with a flexible leave policy.

• No hierarchical culture.

• Flexible working hours.

• LGBTQ+ inclusive environment.

• Company retreats.

• Technology reimbursements.