Find work in Canada.

319,786 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 4 mins ago
MD
Salesforce Developer - ITS4
Minnesota Direct Care and Treatment
Saint-Paul, NB · St.-Paul, NB
- Full-time
Job Class: Information Technology Specialist 4
Added 4 mins ago
MD
Principal Information Security Engineer - ITS5
Minnesota Direct Care and Treatment
Saint-Paul, NB · St.-Paul, NB
- Full-time
Working Title: Principal Information Security Engineer
Added 34 mins ago
R
Lead Application Administrator
RBC
Toronto, ON
- Full-time
May use specialist knowledge in one or several applications and support environment.
Added 5 hours ago
SA
Cybersecurity Specialist (Junior)
Sarmaya AI
ON · Ontario, Canada
- Full-time
We're looking for a junior cybersecurity specialist to support security assessments and monitoring across Sarmaya's and client systems, building a foundation in enterprise-grade security…
Added 5 hours ago
NH
Asset Protection Specialist
New Horizon Co-op
Grande Prairie, AB
- Full-time
New Horizon Co-op is hiring an Asset Protection Specialist at our Downtown Food Store in Grande Prairie, Alberta.
Added 5 hours ago
T
Financial Crime Risk Investigative Analyst
TD
Toronto, ON
- Full-time
…process support within a defined area. As a key resource and specialist, you will build and maintain knowledge of relevant regulations as well as existing and emerging regulations affecting…
Added 5 hours ago
KM
Employee Services & Relations Specialist/Spécialiste, Services et relations aux employés (GTA)
Konica Minolta Business Solutions, U.S.A., Inc.
Mississauga, ON
- Full-time
The Employee Services & Relations Specialist delivers exceptional HR support and program execution to employees and managers while fostering a positive and compliant workplace environment.…
Added 6 hours ago
WT
Web Developer (Django Specialist)
Webhorse Technologies
Inuvik, NT
- Full-time
…necessary controls prescribed by the Canadian Centre for Cyber Security. This ensures that our clients' IT systems are protected against potential threats, allowing them to focus on their…
Added 6 hours ago
DC
Technical Specialist, Real Property Management
Defence Construction Canada
Cold Lake, AB
- Full-time
We’re looking for a Technical Specialist, Real Property Management who thrives in a dynamic environment and enjoys solving complex facility and infrastructure challenges. In this role, you…
Added 6 hours ago
PA
Network and Systems Specialist
Prodomax Automation Ltd.
Barrie, ON
- Full-time
Prodomax Automation Ltd. is currently seeking a NETWORK AND SYSTEMS SPECIALIST to join our team.
Added 6 hours ago
Network & Systems Support Specialist Trainee CANADA
CLAAS
Regina, SK
The Network & Systems Support Specialist Trainee installs, modifies, and makes repairs to personal computer hardware and software systems, provides technical assistance and training to…
Added 6 hours ago
RB
Lead System Administrator
Royal Bank of Canada
Toronto, ON
- Full-time
May use specialist knowledge in one or several applications and support environment.
Added 7 hours ago
J
Responsable Santé, Sécurité, Sûreté et Environnement / Health, Safety, Security, and Environment Lead
JLL
Bromont, QC · Montreal, QC · Sherbrooke, QC · CAN-CLIENT Bromont-IBM - Bromont
- Full-time
Added 8 hours ago
AA
Spécialiste de la sécurité des occupants / Occupant Safety Certification Specialist
Airbus Aircraft
Montreal, QC
- Full-time
The A220 commercial aircraft Programme is looking for a Certification Specialist to join our Occupant Safety team team based in Mirabel (Québec, Canada), where you where you will perform a…
Added 8 hours ago
S
Platform and Security Growth Business Account Executive
Salesforce
Toronto, ON · Canada - Toronto
- Full-time
Platform Passion: Experience in selling similar solutions or a strong understanding of our subject matter across Data Security, Compliance, Governance, Dev Ops and Business Continuity
Added 10 hours ago
B
Credit Funder
BMO
Montreal, QC · HO
- Full-time
As a funding specialist, facilitates the funding process acting as a final and independent control point for legal documentation and ensures that the security/legal documentation reflects…
Added 11 hours ago
PA
Specialist, Training and Content
Porter Airlines Inc.
Toronto, ON
- Full-time
As a Specialist, Training & Content, you will play an important role in helping our Customer Support team build the knowledge, skills and confidence needed to deliver exceptional service to…
Added 11 hours ago
UO
Manager, Partnerships & Engagement
University of Calgary
Calgary, AB
- Full-time
…University Legal Services. The Manager supervises one Partnerships Specialist, with the expectation that the team will continue to grow. As a new position, this role is essential to…
Added 12 hours ago
C
ServiceNow Business System Architect
CGI
Toronto, ON
- Full-time
Assuring quality, security and compliance requirements are met for supported area.
Added 13 hours ago
W
HSE Specialist II
Worley
Edmonton, AB
- Full-time
Added 13 hours ago
RB
Insurance Advisor - Life, Health & Wealth
Royal Bank of Canada
Charlottetown, PE
- Full-time
Industry Designations Preferred: CFP (Certified Financial Planner), CLU (Chartered Life Underwriter), CHS (Certified Health Insurance Specialist)
Added 14 hours ago
RI
Insurance Advisor - Life, Health & Wealth
RBC Insurance
Charlottetown, PE
- Full-time
Industry Designations Preferred: CFP (Certified Financial Planner), CLU (Chartered Life Underwriter), CHS (Certified Health Insurance Specialist)
Added 14 hours ago
A
Smart 3D Administration and Support Specialist
AtkinsRéalis
Mississauga, ON
- Full-time
The Smart 3D (SP3D) Support Specialist supports the Hexagon Smart 3D application in a project environment with regards to the following: User support, Project support, SP3D project…
Added 14 hours ago
A
Smart 3D Administration and Support Specialist
AtkinsRéalis
Mississauga, ON
- Full-time
The Smart 3D (SP3D) Support Specialist supports the Hexagon Smart 3D application in a project environment with regards to the following: User support, Project support, SP3D project…
Added 14 hours ago
SL
Bilingual Document Specialist
Sun Life Québec
Montreal, QC
- Full-time
At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring,…

Faire

Staff Security Engineer - Bot & Traffic Defence

Toronto, ON, Canada
Kitchener, ON, Canada

Canada: the pay range for this role is $190,500 to $262,000 per year.

Apply About employer

Applications open in a new tab.

Job details

Pay: Canada: the pay range for this role is $190,500 to $262,000 per year.
Posting language: English
Posted: Sep 29, 2026

Original job description

About Faire

Faire is a technology wholesale platform built on the belief that the future is local. Independent retailers around the globe collectively represent a multi-hundred-billion-dollar wholesale market that has historically been fragmented and offline. At Faire, we're using the power of tech, data, and machine learning to connect this thriving community of entrepreneurs across the globe. Picture your favorite boutique in town - we help them discover the best products from around the world to sell in their stores. With the right tools and insights, we believe that we can level the playing field so businesses can grow and local communities can thrive.

We’re looking for smart, resourceful and passionate people to join us as we power the shop local movement. If you believe in community, come join ours.

About this role:

Our Engineering organization owns the software that makes our marketplace work. Our Bot & Traffic Defence function owns how Faire holds up against automated traffic: scraping, credential abuse, and application-layer DDoS, from the edge through to detection and scoring. We care about good engineering practice and love to write software that is secure, tested, easy to maintain, and can scale to millions of users. We build scalable, reusable frameworks; consult with product teams; listen to the data; and iterate.

As a Staff Security Engineer, Bot & Traffic Defence, you will be the first dedicated owner of this domain. You will set the technical direction, build the controls and signals that back it, and establish an ownership model that holds across Security, Platform, service teams, and Anti-Abuse.

As a Staff Security Engineer, Bot & Traffic Defence, you’ll collaborate with us to:

Own the technical strategy and roadmap for bot, scraping, and application-layer DDoS defence end to end, from edge controls through detection and scoring, including revising the strategy where the evidence contradicts it.
Author and tune edge security controls as code: WAF rules, rate limiting policies, and challenge mechanisms, against real adversaries who respond to every change you make.
Build higher-confidence bot and trust signals so that Faire can enforce more aggressively without turning legitimate logged-out buyers away.
Design and operate distributed layer 7 rate limiting, and make the calls on keying, counter state, and where in the stack enforcement belongs.
Make incident response for bot and DDoS events a solved problem: clear paging paths, runbooks a non-specialist on-call can execute at 3am, and observability that answers whether humans are actually being affected.
Lead post-incident reviews on recurring classes of bot incidents so systemic causes surface instead of repeating.
Build the tooling, secure defaults, and playbooks that let service-owning teams protect their own endpoints correctly without you in the loop for every decision.
Land a durable ownership model across Security, Platform, service teams, and Anti-Abuse, where every attack vector has a named owner who has accepted it and it holds without escalation.
Make Faire's bot posture legible to leadership, including a defensible view of residual risk, and force the outstanding business decisions that engineering is currently making by default.

We’re excited about you because you have:

Hands-on operational ownership of a CDN or edge security platform (Cloudflare, Akamai, Fastly, or AWS CloudFront/WAF/Shield) in production against real adversaries, managed as code rather than clicked through a vendor dashboard.
Experience defending a high-traffic consumer site against scraping and application-layer DDoS, including the part where the attacker shifts vectors a week after your control ships, and the instinct to design for raising attacker cost rather than for a permanent block.
A practical understanding of bot detection signals and where each one fails: TLS and HTTP fingerprinting (JA3/JA4), behavioural signals, mobile device attestation (App Attest, Play Integrity), and challenges, with a real view on the precision and recall trade-off each one carries.
Experience designing distributed rate limiting at layer 7, including the differences between per-IP, per-ASN, per-session, and per-fingerprint keying, when each gets evaded, and how to hold counter state across a fleet without the limiter becoming the bottleneck.
Quantitative rigour in detection work: you can measure a detection's precision and recall, set a false-positive tolerance with the business, and defend a threshold change with data rather than intuition.
A preference for solving traffic and abuse problems with code rather than manual operations, including writing and maintaining internal tooling that on-call engineers depend on mid-incident.
Comfort writing and reviewing code in an OOP language such as Kotlin, Java, Python, or TypeScript, enough to read an unfamiliar service, find where a control is being bypassed, and open the pull request that fixes it.
Working fluency with infrastructure as code and cloud environments (Terraform, AWS or GCP, Kubernetes) sufficient to own a security control plane, and the judgment to know when a Terraform-gated workflow is too slow for an incident and needs a break-glass path with an audit trail.
Experience owning incident response for a live traffic attack, including holding the authority to block traffic under time pressure.
A track record of setting technical direction in an ambiguous domain with no existing owner, and of sequencing work when everything is nominally urgent.
Experience landing a cross-team ownership model without authority, including moving responsibility away from a team that currently holds it and getting other teams to accept obligations they did not ask for.
Comfort delivering primarily through other teams rather than personal throughput.
The ability to put security risk in business terms for executives, translating traffic and abuse metrics into revenue, cost, and reputational exposure.
Clear communication with engineers outside security, describing an attack and its trade-offs without alarmism or unexplained jargon.

Technologies we use and teach:

Kotlin, Typescript, Python
Edge and CDN security tooling: WAF, rate limiting, bot management, challenge policies
AWS, OCI, Terraform, Kubernetes
HTTP, JSON, and Protocol Buffers

Salary range:

Canada: the pay range for this role is $190,500 to $262,000 per year.

This role will also be eligible for equity and benefits. Actual base pay will be determined based on permissible factors such as transferable skills, work experience, market demands, and primary work location. The base pay range provided is subject to change and may be modified in the future.

Hybrid Faire employees currently go into the office 3 days per week on Tuesdays, Thursdays, and a third flex day of their choosing (Monday, Wednesday, or Friday). Additionally, hybrid in-office roles will have the flexibility to work remotely up to 4 weeks per year. Specific Workplace and Information Technology positions may require onsite attendance 5 days per week as will be indicated in the job posting.

Why you’ll love working at Faire

Move fast: You'll own meaningful problems that serve customers around the globe with the agency to move fast and see your results clearly.
Equipped to scale: We invest in what matters, including the latest enterprise AI tools, to help you work smarter and get more out of every day.
Best in class: Our team is full of sharp, kind, and generous colleagues who care about their craft and about helping you grow in yours.
Real rewards. Competitive pay, equity, and comprehensive benefits designed to support your life inside and outside of work.
Belonging: We're intentional about building an environment where every Faire employee has equal access to opportunities, growth, and success.

Faire was founded in 2017 by a team of early product and engineering leads from Square. We’re backed by some of the top investors in retail and tech including: Y Combinator, Lightspeed Venture Partners, Forerunner Ventures, Khosla Ventures, Sequoia Capital, Founders Fund, and DST Global. We have headquarters in San Francisco and Kitchener-Waterloo, and a global employee presence across offices in Toronto, London, and New York. To learn more about Faire and our customers, you can read more on our blog.

Faire provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or gender expression.

Faire is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Accommodations are available throughout the recruitment process and applicants with a disability may request to be accommodated throughout the recruitment process. We will work with all applicants to accommodate their individual accessibility needs. To request reasonable accommodation, please fill out our Accommodation Request Form (https://bit.ly/faire-form)

Privacy

For information about the type of personal data Faire collects from applicants, as well as your choices regarding the data collected about you, please visit Faire’s Privacy Notice (https://www.faire.com/privacy)

Apply About employer

More about this job

Responsibilities

You will own the technical strategy and roadmap for bot, scraping, and application-layer DDoS defense. You will also build tooling and secure defaults to enable service-owning teams to protect their own endpoints effectively.

Requirements

The role requires hands-on operational experience with CDN or edge security platforms and a strong background in defending high-traffic consumer sites. You must be proficient in infrastructure as code, OOP languages, and quantitative detection methods.

Skills

Bot defense
Traffic defense
WAF
CDN
Cloudflare
Akamai
Fastly
AWS
Terraform
Kubernetes
Kotlin
Python
TypeScript
Incident response
Distributed rate limiting
Security engineering

Benefits

Equity
Comprehensive benefits

Visa sponsorship

Not detected in the job text

Keywords

Staff Security Engineer
Bot Defense
Traffic Defense
WAF
CDN
Cloudflare
Akamai
Fastly
AWS
Terraform
Kubernetes
Kotlin
Python
TypeScript
Incident Response
Distributed Rate Limiting
Security Engineering
Scraping
DDoS
TLS
HTTP
Fingerprinting
Infrastructure as Code
Marketplace
Wholesale
Security Controls
Observability
Post-incident Review
Risk Management
Edge Security

Report this job