Senior Software Engineer - Infrastructure Security

Accountabilities:: Partner with engineering teams to review cloud and compute architecture changes and identify security implications. Develop threat models for cloud and compute platforms to identify risks and inform appropriate security controls. Build, adopt, and maintain tools that monitor and harden cloud infrastructure and operating systems. Develop security logging and monitoring pipelines and support intrusion detection capabilities. Apply AWS and Kubernetes security expertise to guide remediation efforts and shape the security control roadmap. Define and implement security policies, monitor compliance, and help ensure infrastructure remains aligned with established controls. Develop automation and security tooling for threat detection, incident containment, network access management, and other security requirements. Integrate security practices into engineering workflows and CI/CD environments to identify vulnerabilities earlier. Conduct initial security incident triage, assessing scope, urgency, and potential impact, and participate in incident response activities. Contribute to secure coding practices, technical standards, and knowledge sharing across engineering teams. Requirements: Strong experience as a software engineer, with deep technical capability in at least one infrastructure or security domain. Hands-on experience securing large-scale cloud environments, particularly AWS. Strong understanding of infrastructure-as-code and tools such as Terraform or CloudFormation. Knowledge of AWS IAM policies, network segmentation, VPC design, cloud-native monitoring, and logging. Experience identifying cloud misconfigurations, assessing security risks, and driving remediation. Experience with security automation and integrating security tooling into CI/CD pipelines. Familiarity with SAST, DAST, dependency scanning, and secure software development practices. Strong Linux and systems security knowledge, including container security, POSIX capabilities, SECCOMP, and Linux Security Modules. Kubernetes security experience is valuable, as is familiarity with serverless architectures, OSQuery, or eBPF. Ability to balance technical detail with effective prioritization and right-size solutions for the problem at hand. Strong ownership, problem-solving, time management, communication, and ability to navigate complex technical challenges. Product security experience is a plus, including knowledge of secure web applications, APIs, OWASP Top 10, XSS, CSRF, and SQL injection. Availability for meetings and impromptu communication during coordination hours, Monday–Friday, 9:00 AM–3:00 PM Pacific Time. Benefits: For Toronto and Vancouver-based candidates: $221,209–$256,433 CAD + equity + benefits . For candidates in other Canadian locations: $206,461–$239,337 CAD + equity + benefits . Flexible equity program in eligible countries, allowing a portion of equity compensation to be taken as cash. Medical, dental, and vision coverage. Equity refreshers. Remote work reimbursement. Paid time off. Employee assistance programs. Fully remote work within eligible locations in Canada. Opportunity to work across cloud infrastructure, systems security, automation, and product security. Broad technical ownership and collaboration with engineering teams on security-critical initiatives.