Senior Software Engineer, Security

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Define the technical vision for security tooling and AppSec methodologies.

• Spearhead secure design initiatives across key engineering projects, encompassing threat modeling and architectural considerations.

• Conceptualize and enhance DevSecOps architecture, integrating security throughout the software development lifecycle (SDLC).

• Develop and expand internal security tools to detect and resolve vulnerabilities.

• Identify and apply AI solutions to streamline and scale security operations.

• Execute advanced offensive security tasks, linking vulnerabilities and creating proofs of concept that illustrate business repercussions.

• Empower developers to produce more secure code and expedite security processes through training and AI-driven tools.

• Guide and nurture engineers, elevating the quality of security practices.

• Collaborate with product engineers, DevOps, and Fraud teams.

• Choose and implement evolving security stack tools.

• Oversee and enhance the organization’s AI infrastructure.

⛳️ Requirements

• Minimum of 5 years of experience in security (AppSec, DevSecOps, offensive security, or related fields).

• Proven professional experience in offensive security, identifying, chaining, and exploiting complex vulnerabilities in both applications and infrastructure.

• A history of leading security projects and mentoring or developing engineering talent.

• Experience in leading threat modeling and secure design within engineering initiatives.

• Proficient in designing and integrating security measures within CI/CD pipelines and the SDLC.

• Practical experience with cloud infrastructure or cloud security, particularly with AWS and Kubernetes.

• Comfortable writing and maintaining code, with a preference for Python.

• Relevant security certifications, such as Burp Suite Certified Practitioner, KCSA, or AWS SCS, are advantageous.

• Professional software development experience is a plus.

• Contributions to published security research, CVEs, or conference presentations are a bonus.

• Experience utilizing AI/LLMs in security or engineering workflows is a plus.

• Contributions to open-source security tool development are a bonus.

• Experience in mobile development or mobile security is a plus.

🏝️ Benefits

• Equity options.

• Bonus opportunities.

• Competitive salary.

• Comprehensive benefits starting from day one.

• Remote-first flexibility: work from anywhere globally and choose your hours.

• Unlimited paid time off (PTO).

• Company-wide recharge days.

• Annual team offsites.

• Weekly UberEats credits.

• Travel discounts on Super.com.

• Generous parental leave.

• Flexible return-to-work plans.

• Wellness budgets.

• Personal development funds.

• Team-level learning resources.