[Hiring] Staff Security Engineer @Shakepay

Role Description

We’re looking for a Staff Security Engineer to help safeguard Shakepay’s infrastructure, products, and customer data while levelling up our AI platform, security capabilities, and observability.

In this role, you’ll be a hands-on technical contributor across multiple associated security domains, such as application, product, infrastructure, enterprise, and observability. You’ll partner closely with engineering teams to design and implement scalable security solutions that balance risk reduction, customer experience, and product growth.

You’ll be expected to work in an AI-forward way. Using AI tools, agents, and automation to increase your reach and keep pace with the scope and scale of Security at Shakepay is a core part of the role, not an optional skill. You’ll help level up our existing AI platform and apply AI to security engineering, observability, testing, detection, and response.

What you’ll be doing

• Design and drive security solutions across multiple associated domains, including product, internal applications, infrastructure, enterprise systems, and observability.
• Conduct threat modeling for existing systems and new product initiatives.
• Partner with engineering teams to embed security into development and delivery workflows.
• Build, tune, and automate security alerts, detections, observability, and response workflows, using AI and agents where they can increase scale and effectiveness.
• Participate in and help lead incident response as part of the on-call rotation.
• Support governance, compliance, and regulatory efforts (SOC 2, ISO 27001, PCI, etc.).
• Mentor engineers and share security best practices across the organization.
• Help shape security priorities and technical direction while building strong relationships with internal stakeholders and external security vendors.

Qualifications

• 8+ years of experience in security engineering, software engineering, or a related technical discipline, with meaningful experience working in security.
• Strong technical depth in one or more security domains, with the ability to operate effectively across associated domains.
• Advanced, hands-on experience using AI tools, agents, and automation to increase the scale and effectiveness of security engineering work.
• Experience working in cloud environments (AWS preferred).
• Hands-on experience with incident response and on-call rotations.
• Strong communication skills, technical judgment, and a clear sense of ownership.

Requirements

• Experience working in fintech, crypto, or other regulated environments.
• Exposure to product security and influencing product design.
• Experience with AI-assisted security testing, offensive security, vulnerability research, detection engineering, or security observability.
• Knowledge of Bitcoin and excitement to learn more.
• Comfort using Git/GitHub for collaboration and process management.

Benefits

• Be an owner: Every employee has stock options as part of their total compensation.
• Reach your goals: Quarterly performance and salary assessments, we’re here to be proactive about compensation and reward our top-performers.
• Generous AI token budget.
• Health & wellness: Access to health and dental coverage, including health and wellness spending accounts.
• Remote-friendly: Work from anywhere in Canada, with optional access to our office spaces in Montreal and Toronto.
• Level Up: A $2,000 annual budget for courses, certifications, and training to support your career growth.
• Time off: 20 days of vacation per year. And if you use all your vacation, we give you a $1,000 bonus.
• Parental leave: Enjoy a parental leave top up to 100% of your salary for 18 weeks.
• Have fun together: quarterly team-specific or company-wide offsite to connect with each other.