Responsibilities
- Design, implement, and harden security infrastructure across our AWS-based cloud environment.
- Build and improve vulnerability management and reporting processes across infrastructure and applications.
- Lead and coordinate security incident response efforts, including investigation, remediation, and postmortem analysis.
- Implement and manage SIEM, monitoring, alerting, and detection capabilities
- Partner with engineering teams to design and maintain secure systems and development practices.
- Develop automation and tooling to improve security operations and reduce manual processes.
- Evaluate and strengthen IAM policies, access controls, and cloud security configurations
- Support application security initiatives including secure SDLC practices, threat modeling, and testing workflows.
- Manage external penetration testing engagements and remediation tracking
- Collaborate with vendors, auditors, and compliance stakeholders on security and regulatory initiatives.
- Contribute to policies, standards, and operational procedures aligned with evolving regulatory requirements.
- Assess the organization’s overall security posture and provide practical recommendations for improvement.
Requirements
- 3–5 years of hands-on experience securing AWS and cloud-native infrastructure, including infrastructure hardening, IAM, networking, and cloud security best practices.
- Deep understanding of networking, Linux systems, IAM, and infrastructure security principles.
- Experience with application security practices and secure software delivery.
- Experience managing penetration testing programs and remediation processes.
- Experience operating in fintech, cryptocurrency, or other regulated environments.
- Strong understanding of modern security threats, attack vectors, and defensive controls.
- Ability to write code, automation, or tooling to improve security operations.
- Experience working cross-functionally with engineering and infrastructure teams.
- Strong incident response and troubleshooting capabilities.
- Comfortable operating in high-ownership, fast-moving environments with evolving priorities.
Nice to Have
- Experience implementing or operating SIEM platforms.
- Security automation and orchestration experience.
- Detection engineering experience.
- Experience with SAST/DAST tooling and workflows.
- Familiarity with compliance and regulatory frameworks such as FINTRAC, MiCA, DORA, PIPEDA, PCI-DSS, or SOC 2.
- Security certifications such as OSCP, CISSP, GIAC, Security+, or cloud security certifications.
Work Arrangement
Hybrid — Etobicoke, ON
Team
Structure: high-ownership engineering organization
WHAT SUCCESS LOOKS LIKE
- Evaluate and improve our overall security posture.
- Identify key risks and security gaps across infrastructure and applications.
- Establish scalable vulnerability management and reporting processes.
- Improve monitoring, detection, and incident response capabilities.
- Help engineering teams adopt stronger security-by-default practices.
- Contribute to building a mature and pragmatic security program that scales with the business.
WHAT YOU’LL LOVE ABOUT US
- Competitive Salary & Benefits – We value and reward our team members.
- RRSP Group Matching Program – We invest in your financial well-being.
- Hybrid Work Environment – Enjoy flexibility while being part of a dynamic team.
- Professional Development – Opportunities for learning and growth covered by Localcoin.
- Team Culture & Events – Regular socials, team meetings, and collaborative workspaces.
- Impactful Work – Play a key role in a growing company and make a real difference.
- Great Place to Work® Certified – Proudly recognized for our positive workplace culture and employee experience 2 years in a row.
JOIN OUR INCLUSIVE TEAM
- Localcoin is committed to building an inclusive, accessible, and equitable workplace. We welcome applicants from all backgrounds and do not discriminate based on race, ancestry, place of origin, color, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity or expression, age, marital status, family status, or disability.
- If you require accommodation at any stage of the recruitment process, please notify the Talent team or email careers@localcoinatm.com.
AI DISCLOSURE STATEMENT
We want to share that we may use artificial intelligence (AI) tools to help screen and assess applications. While technology helps us stay organized and efficient, every hiring decision at Localcoin is made by real people who care about finding the best addition to our team. These tools are used to support our process—not to replace the human judgment and connection that are core to our culture.
Additional Information
- Hybrid work schedule of 2 days a week in office
- Applicants must be legally eligible to work in Canada
- We are not able to provide visa sponsorship
- AI tools may be used to help screen and assess applications, but hiring decisions are made by humans
