Responsibilities
- Evaluate security risks in new and evolving application features, APIs, and integrations through threat modeling and design reviews, delivering practical recommendations to development and product teams.
- Collaborate with engineering and product stakeholders to convert business objectives into enforceable security requirements, conducting risk assessments and implementing risk mitigation controls as necessary.
- Convert insights from risk analyses and security incidents into prioritized action plans, balancing immediate risk reduction with long-term architectural improvements.
- Develop and manage automated tools to enhance scalability of design review workflows and accelerate vulnerability assessment processes.
- Act as a technical authority during security incidents, supporting triage, investigation, and containment efforts.
- Lead follow-up analyses after incidents or releases, transforming findings into improved design standards, monitoring rules, or developer education initiatives.
- Track emerging cybersecurity threats to ensure design review practices and incident response procedures remain effective against current attack methods.
- Assess and deploy third-party security tools that strengthen detection capabilities, response workflows, and secure development practices, ensuring seamless integration into existing processes.
Benefits
- Ample paid time off, including a dedicated birthday leave allowance
- Flexible remote work option allowing up to 20 days of work from nearly any location annually
- Emphasis on mental wellness and personal well-being
- Company-funded therapy access via SpringHealth platform
- Complimentary subscription to Headspace for mindfulness and mental health support
- Annual company-wide break with full team disconnection and no backlog accumulation
- Paid leave for new parents
- Paid time allocated for community volunteering
- Commitment to professional advancement
- Annual budget for skill development and learning resources
- Programs for leadership skill growth
- Unlimited access to a library of on-demand online courses
- Exclusive travel savings opportunities
- Supportive employee communities through resource groups
- Comprehensive private health insurance coverage
- Disability and life insurance plans provided by the company
Compensation
The anticipated salary range for this role in Toronto, Canada is $130,000–$160,000 CAD, based on market data, location, and experience. The position includes eligibility for annual bonuses, equity grants, and a comprehensive benefits package covering health, retirement, insurance, and generous paid time off.
Work Arrangement
Hybrid — Toronto
Other
- Compensation is determined by factors such as market benchmarks, location, and required experience. The expected range in Toronto is $130,000–$160,000 CAD. Benefits include health, retirement, insurance, and paid leave. The role qualifies for annual bonuses and equity.
- Although work primarily follows standard hours, occasional after-hours communication may be required to support global teams, respond to partners, or handle urgent security issues.
Not specified