Senior Security Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Collaborate with engineering teams to conduct security assessments, threat modeling, and risk evaluations.

• Design and maintain scalable security tools to automate vulnerability detection processes.

• Participate in security architecture evaluations for new product platforms.

• Assist in the management of the BugCrowd bug bounty program.

• Act as the point of contact for product security regarding security incidents.

• Work in close partnership with Software, Platform, Mobile, and Infrastructure engineering teams.

• Continuously assess emerging threats and vulnerabilities.

• Take part in the team's on-call rotation.

⛳️ Requirements

• Minimum of 5 years of experience in product security, application security, or a security engineering role.

• Proficiency in detection engineering, security monitoring, or the development of detection-as-code (DaC) pipelines.

• Knowledge of IoT, connected hardware, or vehicle/firmware security.

• Familiarity with regulatory frameworks applicable to connected products.

• Experience in mobile security (iOS, Android) and API security.

• Understanding of secure development practices and integration of security within the SDLC.

• Experience with vulnerability management tools and processes.

• Fundamentals of cloud security (AWS, GCP) and container/infrastructure security.

• Strong analytical capabilities to assess ambiguous security signals.

• Excellent written and verbal communication skills.

• Comfortable operating in a lean, remote-first setting.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field is preferred.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Flexible work hours

• Paid time off

• Remote work options

• Equity options

• Bonus opportunities