Jobs in Canada

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 22 mins ago
F
Security Engineer
Flox
Canada
- Full-time
Added 1 hour ago
Maintenance Services Worker
HealthCareersInSask.ca
Lloydminster, SK
Refrigeration Engineer certificate, where required by the job
Added 2 hours ago
LT
Senior Hardware Engineer
LMI Technologies
Burnaby, BC
- Full-time
LMI is seeking a talented Senior Hardware (FPGA) engineer to join a multi-disciplinary engineering team. The successful candidate will have a proven record in developing complex FPGA code…
Added 2 hours ago
S
Talent Advisor, AI Labs
Salesforce
Toronto, ON · Canada - Toronto
- Full-time
…scientists. You understand the difference between a Machine Learning Engineer and an Applied Scientist. You’ve navigated nuanced leveling conversations, complex compensation structures, and…
Added 2 hours ago
AC
Industrial Engineer
ALTEN Canada
Midland, ON
- Full-time
Hours per Week: 40 hours (Day shift) · Work 100% onsite on the manufacturing floor during the day shift
Added 3 hours ago
MS
Principal Platform Infrastructure Engineer (Containers)
Menlo Security Inc.
Canada
- Full-time
As a Platform Infrastructure Engineer, you'll join a group of experienced engineers who are part of a globally distributed team responsible for building and managing the company's core…
Added 3 hours ago
TI
AI Platform Engineer
TMT IT Solutions
Toronto, ON · Greater Toronto Area, Canada
- $100 to $105 CAD / hour
- Contract
As an AI Platform Engineer for AI & Emerging Tech, you will drive AI platform enablement across the enterprise. This role sits at the intersection of engineering, governance, and user…
Added 3 hours ago
SC
Environmental/Chemical Engineer (Mine Water Management)
SRK Consulting
Sudbury, ON
- Full-time
Must be based in Sudbury, Ontario
Added 3 hours ago
S
Test Development Engineer
SCIEX
Vaughan, ON
- $110,000 to $123,000 CAD / year
- Full-time
The Test Development Engineer is responsible for leading defined test development work packages and delivering functional test hardware, fixtures and automated test software from concept…
Added 3 hours ago
A
Estimator
Actalent
Calgary, AB
- $80 to $100 CAD / hour
- Contract
…Construction Estimator, Project Manager, Construction Manager, Project Engineer, or…
Added 3 hours ago
M
Software Engineer (SWE), Delivery Ops
Mecka
Richmond Hill, ON
- $150,000 to $200,000 CAD / year
- Full-time
Added 3 hours ago
A
Senior Project Electrical Engineer
ABB
Calgary, AB
- Full-time
ABB is seeking a Senior Project Electrical Engineer to join our team. In this role, you will provide technical leadership and oversee the successful execution of multidisciplinary…
Added 5 hours ago
AG
Well Integrity & Asset Retirement Obligation (ARO) Engineer
ATCO Group
Calgary, AB · Edmonton, AB
- Full-time
The Engineering, Gas & Pipelines Division seeks a Professional Engineer (P.Eng.) to help manage and develop ATCO's aging well infrastructure programs, primarily the Abandoned Well Integrity…
Added 5 hours ago
W
Electrical Engineer Level II
Worley
Vancouver, BC
- Full-time
Registration as a Professional Engineer (P.Eng) with EGBC, or eligibility to obtain registration.
Added 6 hours ago
DC
Test Development Engineer
Danaher Corporation
Concord, ON · AB · CAN - Concord - AB Sciex LP
- $110,000 to $123,000 CAD / year
- Full-time
The Test Development Engineer is responsible for leading defined test development work packages and delivering functional test hardware, fixtures and automated test software from concept…
Added 6 hours ago
W
Associate Technical Consultant, Geotechnical Engineer
Worley
Oakville, ON · Markham, ON · Vancouver, BC · Calgary, AB
- Full-time
Principal Geotechnical Engineer, P.Eng. – Tailings and Dams
Added 7 hours ago
H
Ingénieur principal en identité et fiabilité :Ping, ForgeRock/ Sr. Identity & Reliability Engineer
HRConnects
Quebec, QC
- Full-time
Added 7 hours ago
P
Quality Assurance Analyst
Planisware
Montreal, QC
- $70,000 to $80,000 CAD / year
- Full-time
Planisware is seeking a motivated QA Engineer who will be responsible for quality assurance activities in the context of software implementations by our consulting teams. Your ultimate…
Added 7 hours ago
L
Senior Golang Engineer, Data Processing
Litmus
Canada
- Full-time
…customers build on Litmus. We're looking for a Senior Golang Engineer to own the pipelines at the heart of it all: high-throughput, low-latency services that ingest, transform, and route…
Added 7 hours ago
O
Design Engineer
OC
Vancouver, BC
- Full-time
This full-time, on-site Design Engineer role is based in Vancouver, BC. The Design Engineer will contribute to the design and development of smart building controls, automation systems, and…
Added 7 hours ago
RT
Senior Principal Engineer
Raising The Village
Remote, Canada
- Full-time
- Remote
We are seeking a Principal Engineer who combines deep technical expertise with strong people leadership. The Principal Engineer & Engineering Manager is a senior technical leadership role…
Added 8 hours ago
M
Software Engineer, Backend – Edge Systems
Micromart
Remote, Canada
- Full-time
- Remote
As a Software Engineer, Backend – Edge & IoT Systems, you will help build and operate the software systems that run inside Micromart smart stores.
Added 8 hours ago
M
Software Engineer, Backend Systems
Micromart
Remote, Canada
- Full-time
- Remote
As a Software Engineer, you’ll help evolve the core systems that power Micromart as we scale.
Added 8 hours ago
M
Product Engineer, Frontend
Micromart
Remote, Canada
- Full-time
- Remote
As a Product Engineer focused on frontend, you’ll help shape the primary product surfaces entrepreneurs use to run their businesses.
Added 8 hours ago
M
Senior Software Engineer, Backend Systems
Micromart
Remote, Canada
- Full-time
- Remote
As a Senior Software Engineer, you’ll help evolve the core systems that power Micromart as we scale.

Flox

Security Engineer

Canada

Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Nov 13, 2026

Original job description

Listed on CyberJobs.cc, a job board for cybersecurity jobs from the team behind AITraining.jobs.

THE ROLE

This is Flox’s first dedicated security hire. You’ll work directly with engineering leadership to stand up security practices that are pragmatic, developer-friendly, and right-sized for a company at our stage. The role is heavily weighted toward doing - you’ll be the one deploying tools, configuring controls, hardening infrastructure, and closing gaps, not just advising others to do so.

That said, you’ll have real input into how we think about controls, priorities, and our security roadmap as we grow. And because our product sits at the heart of the software supply chain - managing dependencies, environments, and build artifacts for some of the world’s largest engineering teams - security isn’t peripheral here. It’s core to the value we deliver.

If you want to build something from scratch, own it end-to-end, and have your work matter immediately, this is that job. If you want a large team, an existing program to slot into, or mostly governance work, it probably isn’t.

Detection, Monitoring & Response

Help evaluate whether to stand up an internal SIEM or work with an outsourced SOC provider - then implement whichever path makes sense for where we are as a company. If building internally: deploy and configure the SIEM, write and tune detection rules, and own the alerting stack. If outsourcing: manage the SOC relationship, define what gets escalated and how, and ensure we’re getting signal not just noise
Build incident response runbooks and triage workflows - then actually test them (e.g. test backups in case needed for ransomware recovery)
Be the person who sees something and does something about it

Cloud & Infrastructure Security (AWS + Cloudflare)

Scan and harden our AWS posture hands-on: IAM policies, SCPs, security group hygiene, GuardDuty, Security Hub, and automated compliance guardrails need to be evaluated and maintained
Own Cloudflare configuration across WAF rules, DDoS protection, bot management, Zero Trust access, and DLP policies - keeping rules current and tuned as the product evolves
Implement IaC security scanning (Checkov, tfsec, or similar) directly into CI/CD pipelines
Own CSPM tooling - configure it, triage it, fix things, don’t just generate reports

Endpoint Protection

Deploy and manage endpoint protection across developer systems and production endpoints - covering EDR, device posture, behavior monitoring (including dynamic scans), DLP, and threat detection
Ensure developer machines (Mac-heavy environment typical of engineering teams) meet baseline security standards while minimizing friction that slows people down. Understand when and where detective controls suffice vs preventative controls based on thoughtful risk management and defense in depth
Define and enforce endpoint compliance policies, including disk encryption, patch posture, and application controls
Work with engineering to extend endpoint visibility into production infrastructure where applicable

Software Supply Chain

Secure our build and release pipelines
Consider SLSA framework adoption and supply chain integrity attestations for our catalog and environments
Stand up dependency vulnerability scanning and own the remediation workflow end-to-end for third-party services, libraries, middleware, operating systems, and SaaS

Application Security

Integrate SAST and SCA tooling (Semgrep, Snyk, GitHub Advanced Security) into developer workflows
Participate in security design reviews and threat modeling for new features
Work shoulder-to-shoulder with developers to find and fix vulnerabilities using a risk-based model instead of just vulnerability aging reports

Identity, Access & Entitlements

This is a priority area - but implemented right for a company at our size, not over-engineered for a company ten times larger.

Audit and rationalize IAM across AWS, Cloudflare, SaaS applications, and internal tooling; implement the fixes, not just the findings
Drive SSO consolidation, enforce MFA universally, and implement least-privilege access in practice, not just policy
Build a lightweight, repeatable access review process - something that actually runs on a cadence and produces real decisions
Own joiner/mover/leaver processes so that entitlements stay clean as the team grows
Evaluate and implement an appropriate identity governance solution for our stage - not an enterprise IGA platform, but something that gives us control and auditability

What We’re Looking For

3–5 years of hands-on security engineering experience, ideally at a software company or cloud-native environment
A demonstrable track record of implementing security tools and controls, not just scoping or recommending them
Solid working knowledge of AWS security services: IAM, SCPs, GuardDuty, Security Hub, CloudTrail, and related tooling
Hands-on experience with Cloudflare - WAF rule management, Zero Trust, DLP, or similar; comfort learning what you haven’t used yet
Experience deploying and managing endpoint protection (EDR/MDM) across a mixed developer and production environment
Familiarity with software supply chain concepts: SBOMs, dependency management, artifact signing, SLSA
Experience integrating SAST, SCA, or DAST tools into CI/CD pipelines
Comfort with scripting or light automation (Python, Bash, or similar) to build repeatable processes
Ability to work independently, ruthlessly prioritize, and operate without a playbook
The kind of person who is bothered when something is insecure and doesn’t wait for someone else to fix it

NICE TO HAVE

Familiarity with Nix, package management, or reproducible build systems
Experience evaluating or managing an outsourced SOC relationship
Prior SIEM deployment or detection engineering experience
Experience supporting a SOC 2 or ISO 27001 audit
Security certifications (CISSP, OSCP, AWS Security Specialty, etc.)

WHY FLOX

First dedicated security hire - you’ll build the program, not inherit someone else’s backlog
A product developers genuinely love, which makes working with the engineering team easier
Small team, short feedback loops, real ownership - your work will be visible immediately
Competitive salary, meaningful equity in a well-funded company, and a flexible hybrid environment

Apply on LinkedIn About employer

More about this job

Responsibilities

Build and operate Flox’s security program, including detection and incident response, AWS and Cloudflare security, endpoint protection, and secure software supply-chain and application practices. Own identity and access controls, implement practical security tooling and processes, and work directly with engineering to prioritize and remediate risks.

Requirements

Candidates should have 3–5 years of hands-on security engineering experience, practical AWS security knowledge, and experience implementing security tools and controls across cloud, endpoint, and CI/CD environments. The role also calls for familiarity with software supply-chain security, application security tooling, scripting, and the ability to work independently and prioritize without an established playbook.

Skills

AWS Security
Cloudflare Security
Security Information and Event Management
Incident Response
Endpoint Protection
Software Supply Chain Security
Application Security
Identity and Access Management
Security Automation
Infrastructure as Code Security
Threat Modeling
Vulnerability Management
SAST and SCA Integration
Access Reviews
SIEM and Detection Engineering

Benefits

Equity
Flexible Hybrid Work Environment

Visa sponsorship

Not detected in the job text

Keywords

AWS
Cloudflare
IAM
Service Control Policies
GuardDuty
Security Hub
CloudTrail
SIEM
SOC
Incident Response
EDR
MDM
DLP
SLSA
SBOM
Artifact Signing
SAST
SCA
DAST
Semgrep
Snyk
GitHub Advanced Security
Checkov
tfsec
CSPM
CI/CD
Python
Bash
Nix
SOC 2

Report this job

Work requirements

Jobs in Canada