Senior Security Engineer

Description

The company is a security-first enterprise AI firm that builds foundation AI models and end-to-end products aimed at real business problems.

It trains and deploys frontier models for enterprises that build AI systems, and the team includes researchers, engineers, designers and others.

Headquartered in Toronto, with offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul.

Responsibilities

• Advise the leadership of your team and partner teams, explaining the business risk behind security issues in plain terms.
• Run security operations, including vulnerability management, SAST, DAST, detection engineering and incident response, across CI/CD pipelines and cloud-native production systems.
• Build security into applications at every stage of the software development lifecycle.
• Work with product and development teams on larger projects so software ships securely without slowing delivery.
• Drive and support the bug bounty program, application security reviews and threat modeling, including code review and dynamic testing.
• Evaluate and integrate security tools that automate and scale security work, weighing open-source options against vendor products.
• Collect and analyze security metrics to resolve issues that span several teams.
• Solve problems with developers' concerns in mind, using a flexible and constructive approach to build new solutions.

Requirements

• 5+ years in application or product security, or security operations, with a strong focus on onboarding and tuning security tools.
• Understanding of vulnerability management, network security, cloud security and sound practice across many security fields.
• Comfortable with ambiguity and able to make sound decisions with limited data.
• A flexible, constructive approach to solving problems.
• Able to weigh build versus buy, help build solutions, and review the tools available on the market.
• Solid grasp of secure engineering practices, and able to explain problems and proposed fixes to both technical and non-technical audiences.
• Deep technical knowledge of common vulnerabilities and risks, along with countermeasures and compensating controls.
• Hands-on engineer who wants to automate controls.

Conditions

Full-time position.

Remote-friendly, with the option to work from an office in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin or Seoul, and more offices are opening soon.

Office staff get a daily lunch program, snacks, and regular community and social events.

Remote staff who live far from an office can use a co-working benefit to work alongside others in their city.

The company is an equal opportunity employer.

Applications may be screened and assessed in part by AI-enabled tools, which help recruiters find potential matches but do not restrict which applications recruiters review.

Benefits

• A weekly lunch stipend of $75 (or £75, or the equivalent in local currency).
• Full health and dental coverage, with a separate mental health budget.
• RRSP matching, a 401K and a pension scheme.
• 100% top-up of parental leave for up to 6 months, for either parent.
• Annual enrichment budget for arts and culture, fitness and wellness, quality time, and a workspace improvement credit.
• An education and learning stipend for conferences, courses and coaching.
• 6 weeks of paid vacation (30 working days).
• A travel budget for visiting other offices if you are remote, plus an annual company offsite.
• A $500 home office stipend to set up your workspace.