Shakepay Logo

Shakepay

Staff Security Engineer

Posted Yesterday
Be an Early Applicant
Remote
Hiring Remotely in Canada
Senior level
Remote
Hiring Remotely in Canada
Senior level
Design and implement security solutions across application, product, infrastructure, enterprise, and observability domains. Conduct threat modeling, embed security into engineering workflows, automate detections and incident response using AI, participate in on-call incident response, and support compliance efforts including SOC 2, ISO 27001, and PCI. Mentor engineers, influence security strategy, and collaborate with internal stakeholders and vendors in a regulated fintech environment.
The summary above was generated by AI

At Shakepay, we’re on a mission to usher in the Bitcoin golden age. We’re reimagining financial services to give every Canadian their fair shake.
Our culture is built around doing work that matters, winning as a team, and celebrating success. If you're the kind of person who values growth, shipping fast, and sharing your ideas openly with a group of like-minded people, come and build with us!

About Shakepay

Since 2015, we've been on a mission to help Canadians build long-term wealth through bitcoin. Over the past few years, we've expanded beyond buying and selling bitcoin to offer a growing suite of everyday financial products - including the Shakepay Card, direct deposit, bill payments and Interac e-Transfer - making it easier to earn, save and use bitcoin every day. Today, more than 1.5 million Canadians use Shakepay to grow their bitcoin savings and take control of their financial future as we continue to push the boundaries of what modern financial services can look like.

We’re regulated as an investment dealer across all Canadian provinces and territories, and backed by renowned venture capitalists with a funding of $44M. We have a passionate, loyal, and growing community, and we’re looking for people who want to help us build something truly special.

About the security team

Security at Shakepay is a company-wide responsibility, supported by a small, high-impact team focused on protecting our customers, systems, and data while enabling product velocity and business growth.

The Security team works across application and product security, cloud and infrastructure security, enterprise security, security tooling, incident response, and emerging areas such as AI security. We work closely with Engineering, Platform, Risk, Compliance, and Product to build pragmatic controls and scalable security capabilities in a regulated fintech environment.

We’re building a modern security function where automation and thoughtful use of AI help us reduce repetitive operational work and increase our impact.

Staff Security Engineer

We’re looking for a Staff Security Engineer to help safeguard Shakepay’s infrastructure, products, and customer data while levelling up our AI platform, security capabilities, and observability.

In this role, you’ll be a hands-on technical contributor across multiple associated security domains, such as application, product, infrastructure, enterprise, and observability. You’ll partner closely with engineering teams to design and implement scalable security solutions that balance risk reduction, customer experience, and product growth.

You’ll be expected to work in an AI-forward way. Using AI tools, agents, and automation to increase your reach and keep pace with the scope and scale of Security at Shakepay is a core part of the role, not an optional skill. You’ll help level up our existing AI platform and apply AI to security engineering, observability, testing, detection, and response.

What you’ll be doing 

  • Design and drive security solutions across multiple associated domains, including product, internal applications, infrastructure, enterprise systems, and observability
  • Conduct threat modeling for existing systems and new product initiatives
  • Partner with engineering teams to embed security into development and delivery workflows
  • Build, tune, and automate security alerts, detections, observability, and response workflows, using AI and agents where they can increase scale and effectiveness
  • Participate in and help lead incident response as part of the on-call rotation
  • Support governance, compliance, and regulatory efforts (SOC 2, ISO 27001, PCI, etc.)
  • Mentor engineers and share security best practices across the organization
  • Help shape security priorities and technical direction while building strong relationships with internal stakeholders and external security vendors

Who we’re looking for 

  • 8+ years of experience in security engineering, software engineering, or a related technical discipline, with meaningful experience working in security
  • Strong technical depth in one or more security domains, with the ability to operate effectively across associated domains
  • Advanced, hands-on experience using AI tools, agents, and automation to increase the scale and effectiveness of security engineering work.
  • Experience working in cloud environments (AWS preferred)
  • Hands-on experience with incident response and on-call rotations
  • Strong communication skills, technical judgment, and a clear sense of ownership

Bonus points

  • Experience working in fintech, crypto, or other regulated environments
  • Exposure to product security and influencing product design
  • Experience with AI-assisted security testing, offensive security, vulnerability research, detection engineering, or security observability
  • Knowledge of Bitcoin and excitement to learn more
  • Comfort using Git/GitHub for collaboration and process management

Why join us?

  • Help shape the future of money: Be part of a team that's revolutionizing financial services in Canada, one sat at a time.
  • Impact millions: As cryptocurrency continues to gain traction, our potential for growth is massive. You can help us bring Shakepay and Bitcoin to all Canadians.
  • Grow your career: We’re growing, and so can you! We have programs in place to encourage continuous learning, growth, and development.
  • Ideas, not titles: We want the best ideas to make their way through, no matter where they come from.

Perks and benefits

  • 🤝 Be an owner - Every employee has stock options as part of their total compensation. 
  • 🥅 Reach your goals - Quarterly performance and salary assessments, we’re here to be proactive about compensation and reward our top-performers. 
  • 🤖 Generous AI token budget
  • 🦷 Health & wellness :  Access to health and dental coverage, including health and wellness spending accounts. 
  • 🌎 Remote-friendly: Work from anywhere in Canada, with optional access to our office spaces in Montreal and Toronto.
  • 🆙 Level Up: A $2,000 annual budget for courses, certifications, and training to support your career growth.
  • 🌴 Time off: 20 days of vacation per year. And if you use all your vacation, we give you a $1,000 bonus.
  • 🐣 Parental leave: Enjoy a parental leave top up to 100% of your salary for 18 weeks.
  • 🙌 Have fun together: quarterly team-specific or company-wide offsite to connect with each other.  

The base salary range for this position is 225,000 - 275,000 CAD. Base pay may vary based on factors such as years of experience, skills and qualifications. Additionally, employees are eligible for equity,  pay increases based on performance, benefits including health and dental care, and paid time off.

We understand that potential can be just as valuable as experience. If you're eager to learn, grow, and contribute to the mission but worry that you may not have the “right” experience, we still want you to apply. We encourage applications from everyone, regardless of background and life experience. We’re firm believers that a little bit of slope makes up for a lot of y-intercept.

We use technology, including artificial intelligence (AI), to support certain parts of our hiring process. This can include tools that assist with scheduling, application review, candidate communications, and generating interview notes, guides, or summaries so our team can stay focused on the conversation. All hiring decisions are made by our hiring team.

Fluency in English is required due to the percentage of English-speaking customers and the nature of our platform, which is available to all Canadians.

Similar Jobs

21 Days Ago
Easy Apply
Remote
Canada
Easy Apply
Expert/Leader
Expert/Leader
Big Data • Fintech • Mobile • Payments • Financial Services
Lead Affirm’s enterprise AI security review program, threat-model AI and LLM applications, assess agentic systems and tool permissions, and design automated guardrails, controls, monitoring, and policy-as-code. Review code, prompts, configurations, vendors, and SaaS AI capabilities; develop testing and red-team scenarios; identify emerging vulnerabilities; support incident response; and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance.
Top Skills: AnthropicAWSCasbGitGoogle WorkspaceInfrastructure As CodeJIRAKubernetesMcpMitre AtlasNotionOauth2OktaOpenaiOwasp Top 10 For Llm ApplicationsPci DssPythonRagSAMLSlackSoc 2Terraform
One Month Ago
Easy Apply
Remote
Canada
Easy Apply
Senior level
Senior level
Cloud • Security • Software • Cybersecurity • Automation
Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.
Top Skills: BashFleetdmGitGitopsGoGoogle WorkspaceInfrastructure As CodeiOSJamf ProLdapLinuxmacOSOktaPowershellPythonTerraformWindows
One Month Ago
Remote or Hybrid
Senior level
Senior level
Healthtech • Social Impact • Software
Build and advance application and product security across the engineering organization. Responsibilities include establishing secure defaults, CI guardrails, security requirements, threat modeling, risk assessments, penetration testing, vulnerability remediation, secure coding education, roadmap ownership, and hands-on code review. The role partners closely with product, engineering, DevOps, and services teams to secure applications, microservices, and AI features while enabling efficient development.
Top Skills: Ci/CdDastMicroservicesPenetration TestingSastSbomThreat Modeling

What you need to know about the Vancouver Tech Scene

Raincouver, Vancity, The Big Smoke — Vancouver is known by many names, and in recent years, it has gained a reputation as a growing hub for both tech and sustainability. Renowned for its natural beauty, the city has become a magnet for professionals eager to create environmental solutions, and with an emphasis on clean technology, renewable energy and environmental innovation, it's attracted companies across various industries, all working toward a shared goal: advancing clean technology.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account