About the company
Join a security-focused engineering team working to protect payment infrastructure and enable secure, scalable digital commerce.
Responsibilities
- Automate security controls: integrate SAST, DAST, and SCA into CI/CD pipelines using GitHub and GitLab.
- Develop secure SDLC practices: design, maintain, and communicate developer-friendly security processes, frameworks, and threat modeling methodologies.
- Manage the bug bounty program: coordinate private bug bounty activities, triage vulnerability reports, and improve mean time to mitigation (MTTM).
- Strengthen engineering capabilities: deliver secure coding training and build a network of Security Champions.
- Conduct application security reviews: perform threat modeling and secure code reviews for Java and Python microservices.
- Promote security awareness: develop technical content and coordinate vulnerability disclosures.
- Partner across teams: embed practical, developer-centric security measures across a globally distributed organization.
Requirements
- 3–5+ years of dedicated experience in Application Security and/or full-stack development.
- Practical experience reviewing Java and Python applications for security vulnerabilities.
- Strong familiarity with integrating SAST and DAST tools into CI/CD workflows, including GitHub Advanced Security, OWASP ZAP, Burp Suite, Synopsys, Veracode, and Semgrep.
- Hands-on experience operating bug bounty programs and defining program metrics and KPIs.
- Practical experience applying methodologies such as STRIDE.
- Strong communication skills and ability to collaborate with engineering teams.
- A bachelor's degree is a plus.
- Background in cloud-native environments or pre-IPO fintech startups is an advantage.
- Hands-on experience with AWS security controls is beneficial.
- Comfort working in a fully remote, globally distributed environment.
Conditions
- Annual salary range: $175,000–$230,000.
- Early equity opportunities.
- 401(k) plan with a 4% employer match and immediate vesting (US employees only).
- Medical, dental, and vision insurance; HSA/FSA options; life and disability insurance; pet insurance.
- Flexible paid time off, paid national holidays, and a global parental leave program.
- Learning stipend, internal promotion opportunities, lunch-and-learn sessions, team events, company summits.
- Remote and hybrid work options, flexible working hours, internet stipend.
- Office setup stipend (US employees only).
- Remote-first, with hybrid attendance required for employees within 30 miles of an office.
- Open to candidates in Ontario, Alberta, and British Columbia.