Senior Security Engineer
Core
Define and drive security roadmap, build security into product design and code reviews, protect identities/accounts across web/mobile/APIs, strengthen prevention/detection/response in cloud, automate security across lifecycle, and manage third-party risk.
Role type
Senior Security Engineer (Application Security, Security Operations, GRC)
Builds
Secure banking platform for Canadian businesses, including multi-currency accounts, global transfers, corporate cards, and AI finance tools.
Domain
Fintech / Banking / Payments
Required skills
Application security, Security operations, Governance risk and compliance, Backend coding (Java/Kotlin), Cloud security (AWS), Incident response, Authentication and identity, Vulnerability management, Penetration testing, Third-party risk management, AI security governance
Preferred skills
Fintech/Payments experience, Fraud/anti-abuse/KYC-KYB systems, SOC 2/PCI DSS audits, Detection engineering, Infrastructure as code, AI/LLM security risks, OSCP/OSWE/GIAC certifications
Technologies
Java, Kotlin, AWS
Responsibilities
Define security roadmap prioritizing business risks; Partner with engineering on design/code reviews for money-moving features; Protect customer identities across web/mobile/APIs; Lead incident response from triage to post-mortem; Automate security across development lifecycle and infrastructure; Manage third-party security risk for vendors and banking partners; Set guardrails for safe AI and agentic tool use; Drive security governance including policies and SOC 2/PCI DSS readiness.
Seniority
Senior, hands-on IC