Senior Security Engineer

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Senior Security Engineer in Canada.

This role sits at the intersection of security engineering, cloud infrastructure, and compliance, with a mandate to define and scale security foundations in a fast-growing, mission-driven environment. You will take ownership of the organization’s security posture, shaping how systems, applications, and data are protected across cloud-native environments. Working closely with engineering, product, and compliance stakeholders, you will drive both strategic direction and hands-on execution of security initiatives. The environment is highly collaborative and remote-first, with a strong emphasis on autonomy, trust, and impact. You will play a key role in building scalable security programs that support SOC 2 and ISO 27001 compliance while enabling engineering velocity. This is an opportunity to directly influence resilience, risk reduction, and security culture at scale.

• Own and evolve the security and compliance program, ensuring alignment with SOC 2, ISO 27001, and related frameworks, including audit readiness and control design.
• Lead end-to-end vulnerability management, from detection and prioritization to remediation in close collaboration with engineering teams.
• Design and improve security architecture, controls, and processes across cloud infrastructure, applications, and internal systems.
• Guide identity and access management, endpoint security, and core IT/security operational practices.
• Oversee vendor and third-party risk management, including assessments and mitigation strategies.
• Support security architecture decisions and ensure secure-by-design principles are embedded in engineering workflows.
• Manage customer-facing security requests, including questionnaires and audit-related documentation.
• Drive security awareness, culture, and best practices across the organization through enablement and collaboration.

Requirements

You bring strong hands-on experience in security engineering or security operations, combined with the ability to translate technical risks into clear business impact. You are comfortable operating in cloud-native environments and working cross-functionally in a remote-first organization. You combine practical execution with strategic thinking, and you are motivated by building scalable security systems rather than maintaining manual processes.

• 5+ years of experience in security engineering, security operations, or related roles
• Strong experience with SOC 2 and/or ISO 27001 compliance, including audits and control implementation
• Deep expertise in vulnerability management, including tooling, prioritization, and remediation workflows
• Strong knowledge of cloud platforms (AWS, GCP, or Azure) and SaaS ecosystems
• Experience with identity and access management, endpoint security, and IT/security operations
• Ability to translate complex security risks into actionable guidance for technical and non-technical audiences
• Strong written communication skills and experience with documentation and audit evidence
• Proven ability to influence cross-functional stakeholders in a distributed, remote environment
• Familiarity or interest in leveraging AI tools to improve security and operational efficiency
• Strong proactive mindset with a balance between security rigor and business pragmatism

Benefits

• Competitive compensation aligned with location
• Fully remote, flexible, and autonomous work environment
• Home office stipend and coworking support
• Learning and development budget for continuous growth
• Collaborative, mission-driven culture focused on climate impact
• Annual in-person team gathering and optional meetups
• Strong emphasis on trust, flexibility, and work-life integration
• Inclusive and diverse international team environment