Senior Security Engineer, Vulnerability Automation

In this role, you will design, build, and own the end-to-end vulnerability automation pipeline that transforms security findings into validated, actionable remediation. You will be responsible for building scalable systems that reduce friction for engineering teams while improving security outcomes.

• Build and maintain vulnerability engineering pipelines, including ingestion of threat intelligence, vulnerability data, and security signals from multiple sources


• Develop automation that filters false positives and generates validated remediation outputs such as PRs or actionable engineering tasks


• Enhance and mature security tooling that integrates into CI/CD workflows and developer environments


• Partner with engineering teams to ensure security findings are accurately triaged, prioritized, and resolved efficiently


• Improve incident response processes, on-call support, and post-incident learnings through runbook development and system enhancements


• Drive cross-team coordination on complex vulnerability issues, ensuring clear communication and steady progress toward resolution


• Experiment with and scale AI-driven security workflows to improve detection, investigation, and remediation speed


• Contribute to evolving security architecture standards, ensuring consistency, reliability, and scalability across the platform

Requirements:

This role requires strong technical depth in security engineering combined with a builder mindset and a collaborative approach to cross-functional work. You should be comfortable working across the full vulnerability lifecycle and influencing engineering teams through trust and expertise.

• 5+ years of experience in security engineering, AppSec, or related roles with hands-on experience building security automation or internal tools


• Strong programming skills in Python and experience integrating security tooling into CI/CD environments (e.g., GitHub Actions)


• Deep understanding of web and API vulnerabilities and how they translate into real-world risk and remediation strategies


• Familiarity with modern security tooling such as SAST, SCA, DAST, secret detection, and ASPM platforms


• Experience designing or improving vulnerability management pipelines, including triage, validation, and remediation workflows


• Proven ability to work across engineering teams and influence without formal authority


• Strong communication skills with the ability to tailor technical findings for different audiences, from engineers to leadership


• Hands-on mindset with AI tools and a strong interest in experimenting with AI-assisted security workflows


• Experience mentoring others or acting as a technical multiplier within engineering teams


• Bonus: experience with mobile application security or large-scale distributed systems

Benefits:

• Competitive annual salary with growth-aligned compensation philosophy


• Full remote flexibility within Canada


• Comprehensive health, dental, and wellness benefits package


• Opportunities for continuous learning, experimentation, and professional development


• Exposure to cutting-edge AI-driven security engineering practices


• Collaborative, high-trust engineering culture focused on impact and autonomy


• Flexible work environment supporting work-life balance and productivity


• Participation in a mission-driven organization focused on improving safety and reliability at scale.