Security Software Engineer

Toronto, ON
On-site
Posted Oct 16, 2026
1 position

$190,000–$210,000 / year

Opens LinkedIn

Employment type: Full-time
Experience level: Senior · 5+ years
Posting language: English
Working hours: 40 hours per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Partner with engineering teams to develop and maintain security strategy, controls, automation, and tooling across applications, cloud infrastructure, deployment pipelines, and AI-assisted development workflows. Lead security initiatives including vulnerability and risk management, IAM, incident response, customer-facing audits and reviews, and mentor teams while supporting incident response and a light on-call rotation.

Job details

Security Software Engineer Permanent: $190k-210k Location: Toronto, ON Required Skills & Experience 5+ years of hands-on software development experience 3-4+ years of security engineering experience Startup experience, preferably in a high-growth SaaS environment Experience building and maturing security programs, processes, and tooling, including assessing security posture, identifying gaps, and driving strategic improvements Strong experience designing and implementing security controls within AWS cloud-native environments Strong expertise in Kubernetes Proficiency in Ruby on Rails for tool development Strong application security expertise, including secure software development practices, developer enablement, and close partnership with engineering teams Experience with AI-assisted development environments and modern AI engineering workflows Experience with infrastructure security, vulnerability management, IAM, and incident management Strong software engineering skills with experience building production-quality security automation and internal tooling. Strong communication skills and ability to influence stakeholders across technical and non-technical teams Experience supporting customer-facing security initiatives such as questionnaires, audits, and enterprise security reviews Nice to Have Skills & Experience Experience working at a security-focused company or cybersecurity vendor Experience supporting enterprise customers with complex security requirements and review processes Previous team lead, tech lead, or player-coach experience Familiarity with Okta, SailPoint, or other identity and access management (IAM) platforms Experience supporting rapid organizational growth and evolving security maturity Job Description Partner closely with engineering teams to understand their workflows and build security solutions that enable developer productivity while maintaining a strong security posture. Drive the company's security strategy and architecture by assessing current controls, identifying gaps, and implementing scalable security practices that support company growth. Design, build, and maintain security tooling and automation that embeds security throughout the software development lifecycle without slowing development velocity. Work with engineers to integrate security into cloud infrastructure, deployment pipelines, and application architecture while balancing security, performance, and business objectives. Lead initiatives across application security, infrastructure security, IAM, vulnerability management, risk management, incident response, and security controls. Support customer-facing security efforts, including security questionnaires, audits, enterprise reviews, and compliance requirements. Develop scalable security solutions that ensure the platform remains secure, reliable, and resilient as the company continues to grow. Partner with engineering and QA teams to establish secure practices for AI-assisted development and modern software delivery. Participate in a light on-call rotation and assist with security incident investigation and response. Act as a technical leader and mentor, helping shape security best practices and the long-term growth of the security function. We may use artificial intelligence tools to assist with the screening, assessment, or selection of potential applicants for this position. Vacancy: This posting is for a currently vacant role, and the successful candidate will be hired into an existing open position.

What you’ll do

Requirements

Requires 5+ years of software development experience and 3–4+ years of security engineering experience, preferably in a high-growth SaaS startup. Candidates should have strong AWS, Kubernetes, Ruby on Rails, application security, infrastructure security, IAM, vulnerability management, and security automation experience, along with communication and stakeholder-influence skills.