About the company
At Shakepay, we're on a mission to usher in the Bitcoin golden age. We're reimagining financial services to give every Canadian their fair shake. Since 2015, we've been on a mission to help Canadians build long-term wealth through bitcoin. Today, more than 1.5 million Canadians use Shakepay to grow their bitcoin savings and take control of their financial future.
About the security team
Security at Shakepay is a company-wide responsibility, supported by a small, high-impact team focused on protecting our customers, systems, and data while enabling product velocity and business growth. The Security team works across application and product security, cloud and infrastructure security, enterprise security, security tooling, incident response, and emerging areas such as AI security.
Responsibilities
- Design and drive security solutions across multiple associated domains, including product, internal applications, infrastructure, enterprise systems, and observability
- Conduct threat modeling for existing systems and new product initiatives
- Partner with engineering teams to embed security into development and delivery workflows
- Build, tune, and automate security alerts, detections, observability, and response workflows, using AI and agents where they can increase scale and effectiveness
- Participate in and help lead incident response as part of the on-call rotation
- Support governance, compliance, and regulatory efforts (SOC 2, ISO 27001, PCI, etc.)
- Mentor engineers and share security best practices across the organization
- Help shape security priorities and technical direction while building strong relationships with internal stakeholders and external security vendors
Requirements
- 8+ years of experience in security engineering, software engineering, or a related technical discipline, with meaningful experience working in security
- Strong technical depth in one or more security domains, with the ability to operate effectively across associated domains
- Advanced, hands-on experience using AI tools, agents, and automation to increase the scale and effectiveness of security engineering work
- Experience working in cloud environments (AWS preferred)
- Hands-on experience with incident response and on-call rotations
- Strong communication skills, technical judgment, and a clear sense of ownership
Bonus points
- Experience working in fintech, crypto, or other regulated environments
- Exposure to product security and influencing product design
- Experience with AI-assisted security testing, offensive security, vulnerability research, detection engineering, or security observability
- Knowledge of Bitcoin and excitement to learn more
- Comfort using Git/GitHub for collaboration and process management
Conditions
- Remote work in Canada
- Stock options as part of total compensation
- Quarterly performance and salary assessments
- Generous AI token budget
- Health & wellness: Access to health and dental coverage, including health and wellness spending accounts
- Remote-friendly