Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer - Vulnerability & Data/SaaS Security based in Canada.

• Own the end-to-end vulnerability management lifecycle, including triage, risk-based prioritization, remediation tracking, SLA enforcement, and exception management across infrastructure, applications, and containers.
• Review vulnerability findings from application security and dynamic testing platforms, coordinate remediation with relevant teams, and maintain compliance with established remediation timelines.
• Develop and continuously improve risk-prioritization models that consider severity, exploitability, business criticality, regulatory requirements, and potential impact.
• Lead the cloud security posture management program across AWS, identifying misconfigurations, configuration drift, and control violations while strengthening secure baselines for IAM, networking, storage, encryption, compute, and containers.
• Manage data security posture initiatives, including sensitive-data discovery, automated classification, data-flow and lineage visibility, and monitoring of cross-environment data replication.
• Operate and mature SaaS security posture management capabilities, including sanctioned and shadow SaaS discovery, OAuth and third-party application governance, and SaaS data exposure monitoring.
• Partner with application, cloud, platform, and data engineering teams to translate security policies into effective technical controls and remediation actions.
• Automate findings aggregation, ticket creation, remediation workflows, ownership assignment, SLA tracking, escalation, and risk-exception processes.
• Build and maintain API integrations between security platforms and downstream systems such as ticketing platforms, SIEMs, CMDBs, and data warehouses.
• Develop Python scripts and automation to enrich security findings with asset and ownership context, reduce manual triage, and improve the reliability of security dashboards.
• Define and maintain security KPIs and KRIs, including MTTD, MTTR, SLA compliance, coverage, and risk-reduction trends.
• Produce accurate executive dashboards and recurring reports that translate technical security findings into clear business-risk narratives and compliance insights.
• Support compliance alignment across frameworks such as PCI DSS, SOX, SOC 2, and ISO 27001.
• Continuously improve the reliability and coverage of security tooling integrations and monitoring programs.

• 5+ years of professional experience in security engineering, with hands-on ownership of vulnerability management, cloud security, application security, data security, or SaaS security programs.
• Direct experience with vulnerability management and application security platforms such as Tenable, Snyk, and StackHawk or equivalent technologies.
• Strong experience securing AWS environments and working with cloud security posture management tools.
• Experience with endpoint and cloud workload detection and response platforms such as CrowdStrike Falcon.
• Hands-on experience with data security posture management and SaaS security posture management solutions, such as Sentra and Reco or comparable platforms.
• Experience with security findings aggregation or application security posture management platforms such as ArmorCode, including integrations with ticketing systems such as Jira.
• Strong Python scripting and REST API integration skills, with the ability to build and maintain security data pipelines across multiple platforms.
• Experience developing security metrics, KPIs, KRIs, and executive-level dashboards from security tooling data.
• Familiarity with SIEM integrations and security automation or orchestration practices is an asset.
• Strong understanding of security and compliance frameworks relevant to regulated environments, including PCI DSS, SOX, SOC 2, and ISO 27001.
• Excellent written and verbal communication skills, with the ability to translate complex technical risks into clear business terms for non-technical and executive stakeholders.
• Strong analytical and problem-solving skills, with the ability to prioritize risks and drive remediation across multiple teams.
• Experience establishing vulnerability, risk-exception, and SLA governance processes is highly valued.
• Experience in fintech, payments, financial services, or another highly regulated industry is considered an advantage.

• Competitive annual base salary of CAD $136,800–$171,000, calibrated according to skills, experience, and working location.
• Annual bonus opportunities based on individual and overall company performance.
• Multiple health insurance options.
• Flexible vacation time plus additional floating holidays.