Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 2 months ago
Senior Principal Industry Analyst Relations
PagerDuty
Toronto, ON
Candidates must reside in an eligible location, which vary by role
Added 2 months ago
M(
Applied AI Engineer
MaintainX (An Autodesk Company)
Remote, Canada
- $153,000 to $224,000 CAD / year
- Full-time
- Remote
MaintainX is a leading mobile-first work execution platform for industrial and frontline teams. More than 13,000 customers, including Duracell, McDonald's, Shell, DHL and Volvo, use…
Added 2 months ago
Product Manager
PlayStation Global
Waterloo, ON
Develop a deep understanding of user needs, motivations, behaviours, and pain points, and represent the voice of the user throughout product development.
Added 2 months ago
TR
Lead Cloud Platform Engineer, Azure
Thomson Reuters
Toronto, ON · Canada, Toronto, Ontario
- Full-time
…changes, sit in architecture discussions with product teams, and lead the platform’s technical response during compliance…
Added 3 months ago
C
Senior Platform Engineering Specialist
CGI
Toronto, ON
- Full-time
Develop reusable platform capabilities that enable self-service infrastructure, application delivery, observability, automation, and software delivery.
Added 3 months ago
C
Senior Data Platform Engineering Specialist
CGI
Toronto, ON
- Full-time
CGI is seeking an experienced Senior Data Platform Engineering Specialist to join our growing Data Platform Engineering consulting practice within the Emerging Technologies team.
Added 3 months ago
C
Senior Full Stack Developer
CGI
Toronto, ON
- Full-time
Code Quality & Architecture: Lead technical design sessions, perform peer code reviews, advocate for Test-Driven Development (TDD), and apply Domain-Driven Design (DDD) and event-driven…
Added 3 months ago
C
Senior Architect (Cloud & FinOps Strategy)
CGI
Toronto, ON
- Full-time
Lead and mentor engineering and development teams, providing technical direction, oversight, and architectural guardrails throughout the delivery lifecycle.
Added 3 months ago
TR
Senior Data Developer
Teck Resources Limited
Vancouver, BC · Greater Vancouver Metropolitan Area
- $122,000 to $150,000 CAD / year
- Full-time
Reporting to the Lead, the Senior Data Developer is responsible for supporting the development of reliable site data that enables Operations performance reporting and analytics.
Added 3 months ago
PE
Senior Embedded Linux Developer (Audio Platforms)
Paradigm Electronics Inc.
Ottawa, ON
- $110,000 to $145,000 CAD / year
- Full-time
…expertise and capability to go through all stages of the product development, from in-house design to in-house manufacturing, from ideas and concepts to best products on the market that…
Added 3 months ago
RC
Manager, Power Platform & Modern Front End Engineering
RSM Canada
Toronto, ON
- Full-time
We are seeking a Manager, Power Platform & Modern Front‑End Engineering to lead the delivery and evolution of enterprise‑grade solutions built on Microsoft Power Platform, with a strong…
Added 3 months ago
ML
Sr. Health & Safety Manager
Maple Leaf Foods Inc
Mississauga, ON
- $122,000 to $172,000 CAD / year
- Full-time
…compliance with federal and provincial regulations. Develop and lead the rollout of a new safety management platform and modernize standard operating procedures to embed consistent,…
Added 3 months ago
B
MarTech Developer
BrainStation
Toronto, ON
- $90,000 to $120,000 CAD / year
- Full-time
…business challenges and want to work at the intersection of software development, data, and digital…
Added 3 months ago
H
Director, Data & AI (Hybrid)
Homebase
Toronto, ON
- $230,000 to $273,000 CAD / year
- Full-time
We’re looking for a Director, Data & AI to lead our Data Engineering, Data & ML Platform, Data Science, and Applied AI teams. You'll own the strategy, execution, and people leadership for a…
Added 3 months ago
TT
Chef de projet sénior / Senior Project Manager - Technologies d'entreprise et PMO
TC Transcontinental
Montreal, QC
- Full-time
Experience with Software Development or Tech domains
Added 3 months ago
QF
Principal Software Engineer, Money Movement (Questbank)
Questrade Financial Group
Toronto, ON · North York, ON
- Full-time
Work-life balance in a hybrid environment with at least 3 days in office
Added 3 months ago
A
Manager, Software Development
AlayaCare
Montreal, QC · Greater Montreal Metropolitan Area
- Full-time
We are seeking a Manager, Software Development to join one of our Product teams. Reporting to the Associate Director, you will cultivate a strong team identity with personalized coaching…
Added 3 months ago
GM
[Dungeons & Dragons PC-Console] Concepteur Narratif Senior - Senior Narrative Designer
Gameloft Montreal
Montreal, QC
- Full-time
There is a game for everyone, and we are now expanding to cross-platform games on PC and consoles, with titles such as Disney Speedstorm and Disney Dreamlight Valley, to provide our players…
Added 3 months ago
B
Sales Director, Platform Sales
Broadsign
Montreal, QC
- Full-time
Broadsign is a growing software company with a mission to make buying, selling, and delivering out-of-home media easier than ever. Our software is operated by some of the most successful…
Added 3 months ago
B
Head of Product Design
BuildOps
Toronto, ON
- Full-time
At BuildOps, we’re building a groundbreaking software solution designed to empower today’s commercial contractors. BuildOps is the leading all-in-one platform for commercial specialty…
Added 3 months ago
P
Manager, Product Training & Enablement
Prophix
Toronto, ON · Etobicoke, ON
- $100,000 to $110,000 CAD / year
- Full-time
At Prophix, we're building the platform that helps finance teams stop managing spreadsheets and start driving strategy. Prophix One™ brings planning, reporting, consolidation, and…
Added 3 months ago
F
Senior Security Engineer
Forma.ai
Toronto, ON
- Full-time
…security across Forma's application, cloud infrastructure, development lifecycle, internal systems, and incident-response…
Added 2 months ago
R
Head of Customer Success, Support and Professional Services
Rockstar
Remote, Canada
- Remote
Rockstar is recruiting for a global leader in urban forestry software and services. Their SaaS platform helps cities, counties, states, universities, nonprofits, and tree care companies…
Added 2 months ago
RB
Senior Scrum Master
Royal Bank of Canada
Toronto, ON
- Full-time
…as part of the epiX program building a new business banking platform and supporting capabilities of the future. The ideal candidate has experience running medium-to-complex agile…
Added 2 months ago
X
Principal Software Engineer
Xello
Remote, Canada
- Full-time
- Remote
Partner with engineering leaders to lead the evolution of AI in the development lifecycle, establishing practical patterns, guardrails, and workflows that improve velocity, quality, and…

Forma.ai

Senior Security Engineer

Toronto, ON, Canada

Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Aug 11, 2026

Original job description

About Forma.ai:

Forma.ai is a Series B startup that's revolutionizing how sales compensation is designed, managed and optimized. We handle billions in annual managed commissions for market leaders like Edmentum, Stryker, and Autodesk.

Our growth has been fuelled by our passion for fundamentally changing and shaping how companies use sales intelligence to drive business strategy.

We’re welcoming equally driven individuals who are excited about creating something big!

The Opportunity

As a Senior Security Engineer, you will be a hands-on technical leader strengthening security across Forma's application, cloud infrastructure, development lifecycle, internal systems, and incident-response practices.

Security today is shared across Engineering and DevOps. You'll work closely with both teams and have real room to shape how Forma approaches security as we grow. Depending on your interests and the needs of the business, the role could develop into a deeper individual-contributor position or help build a dedicated security team.

You'll work directly with Engineering, DevOps, IT, Product, Legal, and Privacy to identify risks, design practical controls, automate security processes, and help teams ship secure and reliable software.

What you'll doCloud and infrastructure security

Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries.
Embed security requirements into Terraform and other Infrastructure as Code, and improve secrets, certificate, encryption-key, and credential management.
Build automated checks for insecure configurations, excessive permissions, exposed resources, and configuration drift across Kubernetes, containers, serverless workloads, networking, and data services.

Application, data, and AI security

Run threat modelling and security architecture reviews for new products, services, APIs, data pipelines, and third-party integrations.
Strengthen tenant isolation, authorization enforcement, and fine-grained data access controls at the schema, table, row, and column level.
Help protect sensitive compensation, financial, customer, and employee data across databases, data warehouses, S3, analytics services, and internal tools, including logging and auditability for sensitive-data access.
Review AI and agentic workflows for data leakage, prompt injection, insecure tool use, and excessive permissions; ensure agents operate strictly within the calling user's permissions; and define secure patterns for approved services such as Amazon Bedrock.
Identify and help remediate application vulnerabilities, and build tooling and reusable libraries that make the secure path the easy one for engineers.

DevSecOps and secure delivery

Embed security testing into CI/CD - static analysis, dependency and container scanning, secrets detection, Infrastructure as Code scanning, and dynamic testing - without creating unnecessary friction for developers.
Define practical vulnerability-severity, remediation, exception, and escalation standards, and partner with developers to separate real risk from noise and fix root causes.
Improve software supply-chain security, including build permissions, artifact integrity, dependency governance, and GitHub administration.

Detection, monitoring, and incident response

Improve security visibility across cloud infrastructure, applications, identities, endpoints, and SaaS systems, and build alerts and detection logic that are worth acting on.
Lead investigations and coordinate containment, remediation, and root-cause analysis, supported by clear runbooks, ownership, and escalation paths.
Run tabletop exercises, and track and communicate security metrics and material risks to technical and business stakeholders.

Identity, governance, and enablement

Strengthen SSO, MFA, privileged access, and onboarding, offboarding, and access-review processes across AWS, GitHub, Microsoft 365, Entra ID, production systems, and internal SaaS - automating provisioning, entitlement reviews, and evidence collection where practical.
Translate security and compliance requirements into concrete technical controls, and support customer security reviews, audits, and programs such as SOC 2 and ISO 27001.
Evaluate third-party tools and integrations for security, privacy, and access-control risk, and help select, consolidate, and rationalize Forma's security tooling for both coverage and cost.
Maintain clear technical standards and provide practical guidance, training, and mentorship that raises security capability across Engineering.

What we're looking for

Six or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
Strong hands-on experience securing AWS environments, including IAM, networking, encryption, logging, and secrets management.
Experience with Terraform, Kubernetes, containers, and security controls in CI/CD pipelines.
Strong understanding of application and API security, authentication, authorization, and multi-tenant SaaS risks.
Experience with vulnerability management, threat modelling, incident response, and security automation.
Ability to write scripts using Python, Bash, PowerShell, or a similar language.
Strong communication, troubleshooting, and cross-functional collaboration skills.

Strongly preferred

Experience supporting SOC 2, ISO 27001, privacy programs, or enterprise customer security reviews.

Nice to have

Experience securing analytics platforms, data pipelines, or systems handling sensitive customer data, including row-level, column-level, or attribute-based access controls.
Experience with AWS security services, EKS, Datadog, Wiz, Snyk, CrowdStrike, or similar tools.
Experience securing AI applications, large language models, agents, or Amazon Bedrock workloads.
Experience in a B2B SaaS or high-growth technology company.
Relevant security or cloud certifications.

Your first 30, 60, and 90 daysFirst 30 days: learn and assess

Build an understanding of Forma's application architecture, AWS environments, deployment processes, data flows, identity systems, and security obligations.
Meet key partners across Engineering, DevOps, IT, Product, Legal, and Privacy, and agree on how security reviews and escalations will operate.
Review existing controls, open findings, incidents, access patterns, monitoring, and compliance commitments.
Identify immediate risks, quick wins, and areas needing deeper assessment.

By 60 days: prioritize and improve

Deliver a prioritized security roadmap based on risk, business impact, and engineering effort.
Begin addressing the highest-priority gaps in cloud access, secrets management, CI/CD security, vulnerability management, and monitoring.
Introduce or improve a consistent process for threat modelling and security architecture reviews, and define vulnerability-severity, ownership, remediation, and exception standards.
Assess the current security tool stack for coverage, overlap, and cost, with consolidation recommendations.
Improve incident-response runbooks, alert ownership, and escalation paths for critical systems, and recommend measurable security objectives and reporting metrics.

By 90 days: operationalize and lead

The expectation here is momentum, not completion - these should be underway and demonstrably working, not finished.

A first set of automated security guardrails in place across AWS, Terraform, Kubernetes, GitHub, or CI/CD, with remaining coverage planned and underway.
Repeatable processes running for vulnerability management, access reviews, security assessments, and incident follow-up, even if still being refined.
Security reviews completed for the highest-priority product, data, or AI initiatives, with required controls agreed and in progress.
Improved visibility into high-risk identities, infrastructure changes, and sensitive-data access.
Progress, key risks, and the next phase of the security roadmap presented to leadership.

Additional Info:

This position is for an existing vacancy
Salary range: 160-190K

What you can expect from us

Meaningful compensation. In addition to your base salary, you’ll join our employee stock ownership plan to further recognize your contributions to Forma.ai’s success.

Healthcare coverage. We have a full benefits package that includes medical, dental, vision, disability and life insurance, and a paid parental leave program.

Learning and development. Access the resources you want to help you grow in your role by utilizing our $750 yearly training stipend.

Growth. You’ll have a huge opportunity to build a career for yourself and gain the type of experience you’re looking for, whether that’s as an individual contributor or as a people leader.

Our Values:

Work well, together. We’re real. We have kids and pets. Mortgages and student loans. We’re in this together, so no matter how brilliant any one of us is, we always play nice with one another – no exceptions.
Be precise. Be relentless. We believe complacency breeds failure, so we set new goals as quickly as we achieve them. We persist in the face of adversity, learn from our mistakes, and push each other to continuously improve. The status-quo is kryptonite.
Love our tech. Love our customers. Our platform solves a very complex problem in a currently underserved market. While everyone at Forma isn’t customer-facing, we’re all customer-focused. Maybe even slightly customer-obsessed.

Use of AI for Recruitment

Currently, Forma.ai does not use artificial intelligence as part of our recruitment process, specifically but not limited to the screening, filtering and shortlisting of applicants.

Our commitment to you:

Forma is a proud equal opportunity employer that is committed to creating a diverse and inclusive work environment. Every effort to accommodate candidates for accessibility will be made upon request. Information received related to accommodations will be addressed confidentially. We know that applying to a new role takes a lot of effort. You're encouraged to apply even if your experience doesn't precisely match the job description. There are many paths to a successful career and we’re looking forward to reading yours.

We thank all candidates for their interest however only qualified applicants will be shortlisted.

Apply on LinkedIn About employer

More about this job

Responsibilities

Lead the design and implementation of security controls across AWS environments, application architectures, and CI/CD pipelines. Coordinate incident response, threat modelling, and compliance efforts to protect sensitive customer and financial data.

Requirements

Requires six or more years of experience in security or infrastructure engineering with strong hands-on expertise in AWS, Terraform, and Kubernetes. Proficiency in scripting languages like Python and experience with security frameworks like SOC 2 or ISO 27001 is highly preferred.

Skills

AWS Security
Terraform
Kubernetes
DevSecOps
Application Security
IAM
Python
Threat Modelling
Incident Response
CI/CD Security
Vulnerability Management
SOC 2
ISO 27001
Network Security
API Security
Cloud Infrastructure

Benefits

Employee Stock Ownership Plan
Medical Insurance
Dental Insurance
Vision Insurance
Disability Insurance
Life Insurance
Paid Parental Leave
Yearly Training Stipend

Visa sponsorship

Not detected in the job text

Keywords

AWS
IAM
Terraform
Kubernetes
Containers
Serverless
Amazon Bedrock
S3
CI/CD
Static Analysis
Dynamic Testing
GitHub
SSO
MFA
Entra ID
SOC 2
ISO 27001
Python
Bash
PowerShell
Datadog
Wiz
Snyk
CrowdStrike
B2B SaaS
Threat Modelling
Vulnerability Management
Incident Response
Cloud Security
Application Security

Report this job

Work requirements

Jobs in Canada