Security Software Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Design, develop, and oversee authentication workflows and OAuth integrations across Motive's suite of products.

• Create and enhance authorization frameworks that ensure secure, scalable access to product functionalities and customer information.

• Establish BYOK (Bring Your Own Key) capabilities along with corresponding security measures for clients with elevated data protection needs.

• Develop and maintain security features, tools, services, and automation within Motive's products and cloud environment.

• Perform architecture, code, data handling, and threat modeling evaluations to identify and mitigate security vulnerabilities.

• Define secure design patterns, controls, and repeatable guidelines for the engineering teams.

• Collaborate with product and engineering teams to resolve vulnerabilities and enhance application security methodologies.

• Independently manage complex security projects from technical design to implementation, deployment, and continuous enhancement.

• Participate in security testing, which includes SAST, DAST, dependency scanning, penetration testing, and attack-tree analysis.

• Guide engineers and foster consensus on security-oriented technical decisions.

• Report to the Manager of Security Engineering and collaborate with engineering and product teams to integrate security throughout the software development lifecycle.

⛳️ Requirements

• A minimum of 5 years of experience in software engineering, security engineering, application security, or a related field.

• Proficient programming skills in Python, Go, JavaScript, or a comparable language.

• Experience in designing and implementing authentication, OAuth, authorization, or identity management platforms.

• Proven ability to identify and address common application security vulnerabilities, including those listed in the OWASP Top 10.

• Experience in designing and implementing security controls for cloud applications and infrastructure, especially in AWS.

• Knowledge of secure software development practices, threat modeling, vulnerability management, and security automation.

• Familiarity with Docker, Kubernetes, identity and access management, secrets management, encryption, and open-source security tools.

• Excellent collaboration skills and the ability to articulate complex security concepts effectively.

• Must be eligible to receive and access commodities and technologies regulated under U.S. Export Administration Regulations.

🏝️ Benefits

• Comprehensive health, pharmacy, optical, and dental care benefits.

• Paid time off.

• Sick leave.

• Coverage for short-term and long-term disability.

• Life insurance.

• 401(k) plan with contributions.

• Possibility of restricted stock units for specific positions.

• Some interviews or training sessions for new hires may take place in person at one of Motive's global offices.