Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 2 months ago
VA
Member of Technical Staff - ML Operations
Veeda AI
Remote, Canada
- Full-time
- Remote
End-to-End Ownership: Lead projects through the complete software lifecycle, including technical specs, implementation, CI/CD, on-call support, and production observability.
Added 3 months ago
E
Senior SDET (IC4) - Senior Software Engineer in Test
Emburse
Toronto, ON
- Full-time
Drive and lead test automation projects and architecture improvements and refactoring to improve test reliability, maintainability and performance
Added 3 months ago
F
Senior Software Engineer (AI & Full Stack)
Fable
Canada
- Full-time
Improve developer experience through automation, tooling, and reusable engineering patterns.
Added 3 months ago
A
Staff Software Engineer
Acceldata
Kitchener, ON
- Full-time
You'll lead high-impact initiatives that directly influence how petabyte-scale data is managed, observed, and optimized across hybrid and cloud ecosystems. You'll collaborate with industry…
Added 3 months ago
A
Senior Software Engineer
Acceldata
Kitchener, ON
- $100,000 to $140,000 CAD / year
- Full-time
Lead the design, development, and implementation of complex features for the Open Source Data Platform.
Added 3 months ago
B
Senior Lead Systems Engineer, AI & Automation
Braze
Toronto, ON
- Full-time
You'll lead complex technical initiatives from concept through delivery, building integrations that span platforms such as Slack, Okta, Workday, Atlassian, GitHub, Google Workspace, and…
Added 2 months ago
C
Senior Java Developer – Vice President
Citi
Mississauga, ON
- Full-time
…join our dynamic team. The ideal candidate will be a hands-on developer with leadership quality, proficient in modern Java technologies and SQL skills, and passionate about leveraging…
Added 2 months ago
E
Staff Engineer, API Design & Governance
eBay
Toronto, ON
- Full-time
eBay’s Developer Ecosystem team offers resources that help developers create solutions to make buying and selling on eBay faster and easier. The team builds and manages eBay’s Public APIs…
Added 2 months ago
GS
Senior Database Migration Engineer
Guidewire Software
Toronto, ON
- Full-time
As a Senior Database Migration Engineer, you will lead complex customer database migrations from legacy Guidewire systems into Guidewire Cloud Platform, ensuring performance, data…
Added 2 months ago
OT
Lead Site Reliability Administrator
Open Text Corporation
Mississauga, ON
- Other
Implement and maintain CI/CD pipelines using Octopus Deploy, Jenkins, GitLab CI, and GitHub Actions.
Added 3 months ago
U
Senior Full Stack Engineer
UST
Toronto, ON
- Full-time
Leverage AI‑assisted development tools such as GitHub Copilot, Windsurf, and Claude Code to increase development velocity, improve code quality, and simplify refactoring.
Added 3 months ago
ES
DevOps Developer - Euna Budget
Euna Solutions
ON · Oakville, Ontario
- Full-time
Familiarity with PowerShell or Python for scripting and automation tasks, and with Azure DevOps alongside GitHub Actions
Added 2 months ago
Senior Software Engineer - Metadata
Fivetran
ON
Python, Rust, GraphQL, Postgres, Snowflake, Kafka, Kubernetes, Docker, AWS, GCP, Datadog
Added 3 months ago
W
Software Engineer III - Visual AI Technology
Wayfair
Toronto, ON
- $192,047 to $211,914 CAD / year
- Full-time
Autonomous Execution: While you will be assigned work by your Team Lead (EM/L4+ ICs), you will also make autonomous decisions about prioritizing your work.
Added 3 months ago
PI
Senior Snowflake Engineer
Princeton IT Services, Inc
Toronto, ON
- Full-time
Develop Snowflake-native utilities and apps (Snowpark for Python, UDFs, external functions, and internal tools) to accelerate developer productivity and data product delivery.
Added 3 months ago
PI
Java Lead Engineer / Architect - Agentic AI
Princeton IT Services, Inc
Toronto, ON
- Full-time
Job Title: Java Lead Engineer / Architect Agentic AI
Added 3 months ago
CP
Databricks Architect | Canada
Cuesta Partners
Remote, Canada
- $180,000 to $225,000 CAD / year
- Full-time
- Remote
About Cuesta Partners We are looking for a Databricks Architect to lead the delivery of data engineering solutions in a client-facing environment. This is a hands-on leadership role where…
Added 3 months ago
A
AI and Automation Software Engineer
AMD
Markham, ON
- $187,200 to $280,800 CAD / year
- Full-time
The AMD NBIO Team is on the lookout for a seasoned Software Engineer to lead our AI and Automation innovation. As a key contributor to the success of AMD’s IP, you will be leading the…
Added 4 months ago
A
Intermediate Full Stack Software Engineer
AltaML
Edmonton, AB
- $90,000 to $110,000 CAD / year
- Full-time
Identify and flag technical risks within your work scope early, with enough supporting detail for the tech lead or architect to make an informed decision
Added 3 months ago
C
Database developer Smartstream TLM SME Senior Programmer Assistant Vice President
Citi
Mississauga, ON
- Full-time
Lead translation of business and operational requirements into scalable, auditable TLM reconciliation solutions across cash, stock, securities, and position reconciliations.
Added 2 months ago
Staff Security Engineer
Forma.ai
Toronto, ON
Improve software supply-chain security, including build permissions, artifact integrity, dependency governance, and GitHub administration.
Added 3 months ago
LI
Lead Engineer
LanceSoft, Inc.
Montreal, QC · Greater Montreal Metropolitan Area
- Contract
Experience with scripting or development languages such as Python, JavaScript, Java, C#, PowerShell, shell scripting, SQL, or similar technologies.
Added 2 months ago
EC
Développeur(euse) QA principal(e) / Lead QA Developer
Eaton Corporation
Brossard, QC
- Full-time
Eaton's Electrical Services and Systems division is currently seeking a motivated Lead QA Developer for its team. This role is based at our Eaton Americas Innovation Center in Brossard…
Added 3 months ago
RB
Staff Software Engineer
Ritchie Bros.
Vancouver, BC
- Full-time
Lead the design of scalable, resilient ETL/ELT data pipelines using dbt, Python, and SQL, establishing patterns and best practices for the team to follow.
Added 4 months ago
AA
Staff Software Developer, Capital
ACV Auctions
Toronto, Ontario
- Full-time
We are seeking a talented and enthusiastic Staff Software Developer to join our growing team. In this role, you will design, develop, and maintain software applications that solve…

Forma.ai

Staff Security Engineer

Toronto, ON, Canada

Apply on job-boards.greenhouse.io About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Sep 11, 2026

Original job description

About Forma.ai:

Forma.ai is a Series B startup that's revolutionizing how sales compensation is designed, managed and optimized. We handle billions in annual managed commissions for market leaders like Edmentum, Stryker, and Autodesk.

Our growth has been fuelled by our passion for fundamentally changing and shaping how companies use sales intelligence to drive business strategy.

We’re welcoming equally driven individuals who are excited about creating something big!

The Opportunity

As a Staff Security Engineer, you will be a hands-on technical leader strengthening security across Forma's application, cloud infrastructure, development lifecycle, internal systems, and incident-response practices.

Security today is shared across Engineering and DevOps. You'll work closely with both teams and have real room to shape how Forma approaches security as we grow. Depending on your interests and the needs of the business, the role could develop into a deeper individual-contributor position or help build a dedicated security team.

You'll work directly with Engineering, DevOps, IT, Product, Legal, and Privacy to identify risks, design practical controls, automate security processes, and help teams ship secure and reliable software.

What you'll do

Cloud and infrastructure security

Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries.
Embed security requirements into Terraform and other Infrastructure as Code, and improve secrets, certificate, encryption-key, and credential management.
Build automated checks for insecure configurations, excessive permissions, exposed resources, and configuration drift across Kubernetes, containers, serverless workloads, networking, and data services.

Application, data, and AI security

Run threat modelling and security architecture reviews for new products, services, APIs, data pipelines, and third-party integrations.
Strengthen tenant isolation, authorization enforcement, and fine-grained data access controls at the schema, table, row, and column level.
Help protect sensitive compensation, financial, customer, and employee data across databases, data warehouses, S3, analytics services, and internal tools, including logging and auditability for sensitive-data access.
Review AI and agentic workflows for data leakage, prompt injection, insecure tool use, and excessive permissions; ensure agents operate strictly within the calling user's permissions; and define secure patterns for approved services such as Amazon Bedrock.
Identify and help remediate application vulnerabilities, and build tooling and reusable libraries that make the secure path the easy one for engineers.

DevSecOps and secure delivery

Embed security testing into CI/CD - static analysis, dependency and container scanning, secrets detection, Infrastructure as Code scanning, and dynamic testing - without creating unnecessary friction for developers.
Define practical vulnerability-severity, remediation, exception, and escalation standards, and partner with developers to separate real risk from noise and fix root causes.
Improve software supply-chain security, including build permissions, artifact integrity, dependency governance, and GitHub administration.

Detection, monitoring, and incident response

Improve security visibility across cloud infrastructure, applications, identities, endpoints, and SaaS systems, and build alerts and detection logic that are worth acting on.
Lead investigations and coordinate containment, remediation, and root-cause analysis, supported by clear runbooks, ownership, and escalation paths.
Run tabletop exercises, and track and communicate security metrics and material risks to technical and business stakeholders.

Identity, governance, and enablement

Strengthen SSO, MFA, privileged access, and onboarding, offboarding, and access-review processes across AWS, GitHub, Microsoft 365, Entra ID, production systems, and internal SaaS - automating provisioning, entitlement reviews, and evidence collection where practical.
Translate security and compliance requirements into concrete technical controls, and support customer security reviews, audits, and programs such as SOC 2 and ISO 27001.
Evaluate third-party tools and integrations for security, privacy, and access-control risk, and help select, consolidate, and rationalize Forma's security tooling for both coverage and cost.
Maintain clear technical standards and provide practical guidance, training, and mentorship that raises security capability across Engineering.

What we're looking for

Eight or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
Strong hands-on experience securing AWS environments, including IAM, networking, encryption, logging, and secrets management.
Experience with Terraform, Kubernetes, containers, and security controls in CI/CD pipelines.
Strong understanding of application and API security, authentication, authorization, and multi-tenant SaaS risks.
Experience with vulnerability management, threat modelling, incident response, and security automation.
Ability to write scripts using Python, Bash, PowerShell, or a similar language.
Strong communication, troubleshooting, and cross-functional collaboration skills.

Strongly preferred

Experience supporting SOC 2, ISO 27001, privacy programs, or enterprise customer security reviews.

Nice to have

Experience securing analytics platforms, data pipelines, or systems handling sensitive customer data, including row-level, column-level, or attribute-based access controls.
Experience with AWS security services, EKS, Datadog, Wiz, Snyk, CrowdStrike, or similar tools.
Experience securing AI applications, large language models, agents, or Amazon Bedrock workloads.
Experience in a B2B SaaS or high-growth technology company.
Relevant security or cloud certifications.

Your first 30, 60, and 90 days

First 30 days: learn and assess

Build an understanding of Forma's application architecture, AWS environments, deployment processes, data flows, identity systems, and security obligations.
Meet key partners across Engineering, DevOps, IT, Product, Legal, and Privacy, and agree on how security reviews and escalations will operate.
Review existing controls, open findings, incidents, access patterns, monitoring, and compliance commitments.
Identify immediate risks, quick wins, and areas needing deeper assessment.

By 60 days: prioritize and improve

Deliver a prioritized security roadmap based on risk, business impact, and engineering effort.
Begin addressing the highest-priority gaps in cloud access, secrets management, CI/CD security, vulnerability management, and monitoring.
Introduce or improve a consistent process for threat modelling and security architecture reviews, and define vulnerability-severity, ownership, remediation, and exception standards.
Assess the current security tool stack for coverage, overlap, and cost, with consolidation recommendations.
Improve incident-response runbooks, alert ownership, and escalation paths for critical systems, and recommend measurable security objectives and reporting metrics.

By 90 days: operationalize and lead

The expectation here is momentum, not completion - these should be underway and demonstrably working, not finished.

A first set of automated security guardrails in place across AWS, Terraform, Kubernetes, GitHub, or CI/CD, with remaining coverage planned and underway.
Repeatable processes running for vulnerability management, access reviews, security assessments, and incident follow-up, even if still being refined.
Security reviews completed for the highest-priority product, data, or AI initiatives, with required controls agreed and in progress.
Improved visibility into high-risk identities, infrastructure changes, and sensitive-data access.
Progress, key risks, and the next phase of the security roadmap presented to leadership.

Additional Info:

This position is for an existing vacancy

What you can expect from us

Meaningful compensation. In addition to your base salary, you’ll join our employee stock ownership plan to further recognize your contributions to Forma.ai’s success.

Healthcare coverage. We have a full benefits package that includes medical, dental, vision, disability and life insurance, and a paid parental leave program.

Learning and development. Access the resources you want to help you grow in your role by utilizing our $750 yearly training stipend.

Growth. You’ll have a huge opportunity to build a career for yourself and gain the type of experience you’re looking for, whether that’s as an individual contributor or as a people leader.

Our Values:

Work well, together. We’re real. We have kids and pets. Mortgages and student loans. We’re in this together, so no matter how brilliant any one of us is, we always play nice with one another – no exceptions.
Be precise. Be relentless. We believe complacency breeds failure, so we set new goals as quickly as we achieve them. We persist in the face of adversity, learn from our mistakes, and push each other to continuously improve. The status-quo is kryptonite.
Love our tech. Love our customers. Our platform solves a very complex problem in a currently underserved market. While everyone at Forma isn’t customer-facing, we’re all customer-focused. Maybe even slightly customer-obsessed.

Use of AI for Recruitment

Currently, Forma.ai does not use artificial intelligence as part of our recruitment process, specifically but not limited to the screening, filtering and shortlisting of applicants.

Our commitment to you:

Forma is a proud equal opportunity employer that is committed to creating a diverse and inclusive work environment. Every effort to accommodate candidates for accessibility will be made upon request. Information received related to accommodations will be addressed confidentially. We know that applying to a new role takes a lot of effort. You're encouraged to apply even if your experience doesn't precisely match the job description. There are many paths to a successful career and we’re looking forward to reading yours.

We thank all candidates for their interest however only qualified applicants will be shortlisted.

Apply on job-boards.greenhouse.io About employer

More about this job

Responsibilities

The Senior Security Engineer will lead security initiatives across cloud infrastructure, application development, and internal systems. They will design practical controls, automate security processes, and collaborate with cross-functional teams to ensure secure and reliable software delivery.

Requirements

Candidates must have six or more years of experience in security engineering, cloud security, or DevSecOps. Strong hands-on experience with AWS, infrastructure as code, and application security principles is required.

Skills

Cloud security
Application security
DevSecOps
AWS
Terraform
Kubernetes
Python
Bash
PowerShell
Threat modelling
Incident response
IAM
CI/CD
Vulnerability management
Security architecture
Data security

Benefits

Employee stock ownership plan
Medical insurance
Dental insurance
Vision insurance
Disability insurance
Life insurance
Paid parental leave
Training stipend

Visa sponsorship

Not detected in the job text

Keywords

AWS
Terraform
Kubernetes
Python
Bash
PowerShell
IAM
CI/CD
SOC 2
ISO 27001
Datadog
Wiz
Snyk
CrowdStrike
Amazon Bedrock
Threat modelling
DevSecOps
SaaS
Identity management
Encryption
Vulnerability management
Incident response
Software supply-chain security
Infrastructure as Code
Data access controls
AI security
GitHub
Microsoft 365
Entra ID
Security architecture

Seniority

Senior

Perks

Parental leave
Stock or equity
Paid training
Remote work allowance

Tools

AWS
Terraform
Kubernetes
GitHub
Microsoft 365
Entra ID
Datadog
Wiz
Snyk
CrowdStrike

Languages

English

Report this job

Work requirements

Jobs in Canada