Security Software Engineer

Toronto, ON
On-site
Posted Oct 22, 2026
1 position

$210,000 / year

Opens LinkedIn

Employment type: Full-time
Experience level: Senior · 5+ years
Posting language: English
Working hours: 40 hours per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Partner with engineering teams to build security tooling and embed scalable security controls across applications, cloud infrastructure, and software delivery workflows. Lead security initiatives spanning application and infrastructure security, IAM, vulnerability and risk management, incident response, customer security reviews, and secure AI-assisted development practices.

Job details

Required Skills & Experience 5+ years of hands-on software development experience 3-4+ years of security engineering experience Startup experience, preferably in a high-growth SaaS environment Experience building and maturing security programs, processes, and tooling, including assessing security posture, identifying gaps, and driving strategic improvements Strong experience designing and implementing security controls within AWS cloud-native environments Strong expertise in Kubernetes Proficiency in Ruby on Rails for tool development Strong application security expertise, including secure software development practices, developer enablement, and close partnership with engineering teams Experience with AI-assisted development environments and modern AI engineering workflows Experience with infrastructure security, vulnerability management, IAM, and incident management Strong software engineering skills with experience building production-quality security automation and internal tooling. Strong communication skills and ability to influence stakeholders across technical and non-technical teams Experience supporting customer-facing security initiatives such as questionnaires, audits, and enterprise security reviews Nice to Have Skills & Experience Experience working at a security-focused company or cybersecurity vendor Experience supporting enterprise customers with complex security requirements and review processes Previous team lead, tech lead, or player-coach experience Familiarity with Okta, SailPoint, or other identity and access management (IAM) platforms Experience supporting rapid organizational growth and evolving security maturity Job Description Partner closely with engineering teams to understand their workflows and build security solutions that enable developer productivity while maintaining a strong security posture. Drive security strategy and architecture by assessing current controls, identifying gaps, and implementing scalable security practices that support company growth. Design, build, and maintain security tooling and automation that embeds security throughout the software development lifecycle without slowing development velocity. Work with engineers to integrate security into cloud infrastructure, deployment pipelines, and application architecture while balancing security, performance, and business objectives. Lead initiatives across application security, infrastructure security, IAM, vulnerability management, risk management, incident response, and security controls. Support customer-facing security efforts, including security questionnaires, audits, enterprise reviews, and compliance requirements. Develop scalable security solutions that ensure the platform remains secure, reliable, and resilient as Rootly continues to grow. Partner with engineering and QA teams to establish secure practices for AI-assisted development and modern software delivery. Participate in a light on-call rotation and assist with security incident investigation and response. Act as a technical leader and mentor, helping shape security best practices and the long-term growth of the security function. Salary: 210,000 CAD per year

What you’ll do

Requirements

Requires 5+ years of software development experience and 3–4+ years of security engineering experience, including experience building security programs and implementing controls in AWS and Kubernetes environments. Candidates should have Ruby on Rails proficiency, strong application and infrastructure security expertise, production-quality automation skills, and the ability to collaborate with teams and support customer-facing security reviews.