Security Software Engineer
- Toronto, ON, Canada
$160,000 to $215,000 CAD / year · Full-time
Applications open in a new tab.
Job details
- Pay
- $160,000 to $215,000 CAD / year
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Required Skills & Experience
5+ years of hands-on software development experience
3-4+ years of security engineering experience
Startup experience, preferably in a high-growth SaaS environment
Experience building and maturing security programs, processes, and tooling, including assessing security posture, identifying gaps, and driving strategic improvements
Strong experience designing and implementing security controls within AWS cloud-native environments
Strong expertise in Kubernetes
Proficiency in Ruby on Rails for tool development
Strong application security expertise, including secure software development practices, developer enablement, and close partnership with engineering teams
Experience with AI-assisted development environments and modern AI engineering workflows
Experience with infrastructure security, vulnerability management, IAM, and incident management
Strong software engineering skills with experience building production-quality security automation and internal tooling.
Strong communication skills and ability to influence stakeholders across technical and non-technical teams
Experience supporting customer-facing security initiatives such as questionnaires, audits, and enterprise security reviews
Nice to Have Skills & Experience
Experience working at a security-focused company or cybersecurity vendor
Experience supporting enterprise customers with complex security requirements and review processes
Previous team lead, tech lead, or player-coach experience
Familiarity with Okta, SailPoint, or other identity and access management (IAM) platforms
Experience supporting rapid organizational growth and evolving security maturity
Job Description
Partner closely with engineering teams to understand their workflows and build security solutions that enable developer productivity while maintaining a strong security posture.
Drive Rootly's security strategy and architecture by assessing current controls, identifying gaps, and implementing scalable security practices that support company growth.
Design, build, and maintain security tooling and automation that embeds security throughout the software development lifecycle without slowing development velocity.
Work with engineers to integrate security into cloud infrastructure, deployment pipelines, and application architecture while balancing security, performance, and business objectives.
Lead initiatives across application security, infrastructure security, IAM, vulnerability management, risk management, incident response, and security controls.
Support customer-facing security efforts, including security questionnaires, audits, enterprise reviews, and compliance requirements.
Develop scalable security solutions that ensure the platform remains secure, reliable, and resilient as Rootly continues to grow.
Partner with engineering and QA teams to establish secure practices for AI-assisted development and modern software delivery.
Participate in a light on-call rotation and assist with security incident investigation and response.
Act as a technical leader and mentor, helping shape security best practices and the long-term growth of the security function.
Pay Rate: $160k - $215k
“Artificial intelligence tools are used to assist in screening and assessing applicants for this position."
Vacancy: This posting is for a currently vacant role, and the successful candidate will be hired into an existing open position.
More about this job
Responsibilities
Partner with engineering teams to develop and integrate scalable security controls, automation, and tooling across applications, cloud infrastructure, and software delivery workflows. Lead security initiatives spanning application and infrastructure security, IAM, vulnerability and risk management, incident response, and customer-facing security reviews, while mentoring teams and supporting secure AI-assisted development.
Requirements
Requires 5+ years of software development experience and 3–4+ years of security engineering experience, including experience building security programs and implementing controls in AWS and Kubernetes environments. Candidates should have Ruby on Rails proficiency, strong application security and software engineering skills, experience with AI-assisted development workflows, and the ability to communicate and influence across teams.
Skills
- Software Development
- Security Engineering
- AWS
- Kubernetes
- Ruby On Rails
- Application Security
- Secure Software Development
- AI-Assisted Development
- Infrastructure Security
- Vulnerability Management
- Identity And Access Management
- Incident Response
- Security Automation
- Security Program Development
- Risk Management
- Communication
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Software
- Technology
- Engineering
Keywords
- AWS
- Kubernetes
- Ruby On Rails
- SaaS
- Application Security
- Cloud-Native Environments
- Security Controls
- Security Programs
- Security Automation
- Internal Tooling
- Secure Software Development
- AI-Assisted Development
- Infrastructure Security
- Vulnerability Management
- Identity And Access Management
- IAM
- Incident Management
- Incident Response
- Risk Management
- Security Architecture
- Deployment Pipelines
- Security Questionnaires
- Audits
- Enterprise Security Reviews
- Compliance
- On-Call Rotation
- Okta
- SailPoint
- Developer Enablement