Senior Security Engineer
- Toronto, ON, Canada
$140,000 to $170,000 CAD / year · Full-time
Applications open in a new tab.
Job details
- Pay
- $140,000 to $170,000 CAD / year
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
7shifts is an HR platform designed to help restaurant teams thrive. With an easy-to-use app and industry-specific solutions, 7shifts saves time, reduces errors, and helps keep costs in check for over 55,000 restaurants. Our mission is to simplify team management and improve performance for restaurants, with a long-term vision of creating a thriving restaurant industry through the power of connected & engaged teams.
As the Senior Security Engineer, you’ll be at the forefront of building and managing our Security program, reporting to the Director, Information Security and Privacy. You’ll be instrumental in strengthening our security capabilities by implementing key frameworks and optimizing technical controls, leading incident response efforts, and delivering hands-on technical training. You’ll collaborate across teams to recommend and implement solutions, manage KPIs and dashboards, and respond decisively in high-stakes situations, all while helping advance our information security roadmap and protecting what matters most!
We’re building an inclusive work environment that is representative of the diverse industry we have the pleasure of serving, and we encourage candidates from all backgrounds to apply.
What You’ll Do
Our Commitment To Our Shifties
We thank you for your interest in joining the 7shifts team!
Our privacy policy can be found here.
Compensation Range: CA$140K - CA$170K
As the Senior Security Engineer, you’ll be at the forefront of building and managing our Security program, reporting to the Director, Information Security and Privacy. You’ll be instrumental in strengthening our security capabilities by implementing key frameworks and optimizing technical controls, leading incident response efforts, and delivering hands-on technical training. You’ll collaborate across teams to recommend and implement solutions, manage KPIs and dashboards, and respond decisively in high-stakes situations, all while helping advance our information security roadmap and protecting what matters most!
We’re building an inclusive work environment that is representative of the diverse industry we have the pleasure of serving, and we encourage candidates from all backgrounds to apply.
What You’ll Do
- Replace manual SOC 2 evidence collection with automated drift detection by building Security-as-Code directly into our GCP/GKE environment
- Partner with engineering squads to build security into the Definition of Done, so it ships with the feature, not after
- Engineer and tune Datadog SIEM detections and our wider technical controls to cut noise, close coverage gaps, and route high-fidelity alerts straight to #secops
- Lead vulnerability management end to end with our development teams, from assessment and prioritization through to remediation
- Own security incidents from triage to post-incident review, and run the incident response exercises and technical training that keep the team ready when it counts
- Drive corporate risk management and own the Information Security Dashboard, reporting key performance and risk indicators that shape decisions
- Advance the Information Security roadmap by turning our security operations framework into working controls and running RFPs (requests for proposal) to recommend the right tools
- Use AI in your daily work to triage alerts, summarize detections, and draft policies and post-incident reviews, so your time goes to the problems that need a human
- 5+ years implementing security controls and operations in a SaaS environment
- Hands-on with Google Cloud Platform (GCP) and Google Kubernetes Engine (GKE), and comfortable securing the CI/CD pipelines and GitHub Actions workflows that engineering teams actually ship through
- Hands-on experience in the security operations world, you know the playbook and how to put it into action when it matters most
- Certifications like CEH, CHFI, OSCP, or ISC2 SSCP - you’ve got the credentials to back up your hands-on experience and stay sharp in a fast-changing space
- Strong communication skills, you know how to bring people together, because strong security relies on teamwork across the business, not just behind the scenes
- A sharp eye for solving tough problems and cutting through complexity, you don’t just spot issues, you find smart ways to fix them
- A curious, analytical mindset that’s always looking for a smarter, better way to do things - you’re the kind of person who asks “why not?” and pushes the work forward
- Deep familiarity with security technologies, including SIEM, and hands-on experience with Datadog for observability-driven security
- Solid grounding in application security, threat and risk assessments, and security risk management, with exposure to bug bounty programs as a plus
- Bonus points if you know the ins and outs of restaurant operations and what keeps that world running
Our Commitment To Our Shifties
- Opportunity: Our product is evolving in exciting ways, and we’re focused on delivering even more value to restaurants. This momentum creates real opportunities to learn and grow. Whether you’re honing your craft or exploring new paths, you’ll be supported and empowered to own your growth and impact a product shaping the future of the restaurant industry.
- Challenge: We’re tackling real problems in a fast-moving, complex industry. The work is scrappy and ambiguous, but meaningful. You’ll think critically, act with intention, and shape solutions that make a real difference for restaurant teams.
- Culture: We’re proud to be recognized among the best workplaces in North America. Guided by our mission and values, we move fast to solve meaningful problems and celebrate wins together. Whether through in-office and remote events, team offsites like Sparks, or everyday moments of connection, we create space for shared growth, collaboration, and fun.
- Equity: We’re a Series C, VC-backed SaaS company, and we believe everyone should share in the success they help create. When we build together, we grow together.
- Health and Wellness: We support Shifties in and outside of work, knowing that what people need can change over time. From day one, you’ll have access to benefits like health and dental, lifestyle spending accounts to a parental leave program built with flexibility in mind, to help you bring your best self to work.
- Flexibility: Our team is intentional around how and where we work, whether remotely, in person, or a mix of both. We prioritize candidates who thrive in a hybrid work environment with offices in Saskatoon and Toronto, ensuring in-person collaboration and connection when possible. Plus, we offer a flexible vacation policy to encourage everyone to recharge when needed. Oh, and our ‘90 Day Shift’ program lets Shift work from (almost) anywhere because who wouldn’t want to trade their desk for a beach view once in a while?
- Support: We set Shifties up for success with the tools they need, like the latest Apple tech, a home office setup, and some 7shifts swag to make it official. But support goes beyond day one. We’re serious about professional growth, offering coaching, feedback, development planning, and opportunities to grow from within.
We thank you for your interest in joining the 7shifts team!
Our privacy policy can be found here.
Compensation Range: CA$140K - CA$170K
More about this job
Responsibilities
Build and improve the security program by automating SOC 2 evidence collection, embedding security into engineering workflows, tuning SIEM detections, and leading vulnerability management and incident response. Own risk reporting and security dashboards, advance the security roadmap, evaluate tools, and deliver incident-response exercises and technical training.
Requirements
Candidates need at least five years of experience implementing security controls and operations in a SaaS environment, with hands-on GCP, GKE, CI/CD, GitHub Actions, and security operations experience. Relevant certifications such as CEH, CHFI, OSCP, or ISC2 SSCP are cited, along with strong communication, analytical problem-solving, and collaboration skills.
Skills
- Security Operations
- Google Cloud Platform
- Google Kubernetes Engine
- Security-As-Code
- CI/CD Security
- GitHub Actions
- Datadog SIEM
- Incident Response
- Vulnerability Management
- Risk Management
- Security Controls
- Application Security
- Threat Assessment
- Security Training
- Security Metrics And Dashboards
- AI-Assisted Alert Triage
Benefits
- Health And Dental Benefits
- Lifestyle Spending Account
- Parental Leave
- Flexible Vacation
- Equity
- Professional Development And Coaching
- Apple Technology
- Home Office Setup
- Remote Work Flexibility
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Software
- Engineering
Keywords
- SaaS
- Google Cloud Platform
- Google Kubernetes Engine
- Security-As-Code
- SOC 2
- Datadog
- SIEM
- CI/CD
- GitHub Actions
- Incident Response
- Vulnerability Management
- Corporate Risk Management
- Information Security Dashboard
- Security Operations
- Security Controls
- Application Security
- Threat Assessment
- Security Risk Management
- Bug Bounty Programs
- Artificial Intelligence
- CEH
- CHFI
- OSCP
- ISC2 SSCP
- RFP