JOB-1821
A seed-stage startup rethinking enterprise identity, still operating under the radar, wants its first full-time security specialist. The company combines consumer-grade usability with rigorous security practice, and needs an engineer who builds protections as code and owns the entire function, reporting to a co-founder with a security pedigree.
The mandate
- Shape and own security across every layer of the product, embedded with engineers throughout development
- Build foundational security systems from nothing, including secrets handling, certificate infrastructure, audit trails and vulnerability tracking
- Lead secure-design consultations, threat modeling and security reviews as a trusted partner to the engineers
- Run compliance efforts such as GDPR, CCPA, SOC 2 and ISO 27001 from the engineering side
- Build up and refine incident response and detection capabilities
- Span compliance, corporate security and product security, with a chance to build a team over time
Profile
- Five or more years in security engineering, most of it in security-titled engineering roles
- Production Go as a main language, writing services or security systems rather than scripts
- Hands-on application security on a real product at a B2B SaaS or fintech company
- Detection and response experience, including detection engineering with Python or a detection-as-code stack
- Low ego, collaborative and happy to wear many hats
- A plus: identity and access management background, Kubernetes and GCP security, and protocol knowledge such as OAuth, SAML, OIDC and WebAuthn
Fully remote for candidates based in Canada. Visa transfers considered.
