Staff Security Engineer

At Shakepay, you'll be a Staff Security Engineer helping safeguard our infrastructure, products, and customer data while levelling up our AI platform, security capabilities, and observability. You'll be a hands-on technical contributor across multiple security domains such as application, product, infrastructure, enterprise, and observability, partnering closely with engineering teams to design and implement scalable security solutions that balance risk reduction, customer experience, and product growth.

What you'll do

• Design and drive security solutions across multiple associated domains, including product, internal applications, infrastructure, enterprise systems, and observability
• Conduct threat modeling for existing systems and new product initiatives
• Partner with engineering teams to embed security into development and delivery workflows
• Build, tune, and automate security alerts, detections, observability, and response workflows, using AI and agents where they can increase scale and effectiveness
• Participate in and help lead incident response as part of the on-call rotation
• Support governance, compliance, and regulatory efforts such as SOC 2, ISO 27001, and PCI
• Mentor engineers and share security best practices across the organization
• Help shape security priorities and technical direction while building strong relationships with internal stakeholders and external security vendors

What you bring

• 8+ years of experience in security engineering, software engineering, or a related technical discipline, with meaningful experience working in security
• Strong technical depth in one or more security domains, with the ability to operate effectively across associated domains
• Advanced, hands-on experience using AI tools, agents, and automation to increase the scale and effectiveness of security engineering work
• Experience working in cloud environments, preferably AWS
• Hands-on experience with incident response and on-call rotations
• Strong communication skills, technical judgment, and a clear sense of ownership
• Fluency in English

Nice to have

• Experience working in fintech, crypto, or other regulated environments
• Exposure to product security and influencing product design
• Experience with AI-assisted security testing, offensive security, vulnerability research, detection engineering, or security observability
• Knowledge of Bitcoin and enthusiasm to learn more
• Comfort using Git/GitHub for collaboration and process management

What we offer

• Base salary of $225,000-$275,000 CAD
• Stock options as part of your total compensation
• Generous AI token budget
• Health and dental coverage, including health and wellness spending accounts
• Remote-friendly work from anywhere in Canada, with optional access to office spaces in Montreal and Toronto
• $2,000 annual learning budget for courses, certifications, and training
• 20 days of vacation per year, plus a $1,000 bonus if you use all your vacation
• Parental leave top-up to 100% of your salary for 18 weeks
• Quarterly team-specific or company-wide offsites
• Quarterly performance and salary assessments

About Shakepay

Since 2015, Shakepay has been helping Canadians build long-term wealth through Bitcoin. The company has expanded beyond buying and selling Bitcoin to offer a growing suite of everyday financial products including the Shakepay Card, direct deposit, bill payments, and Interac e-Transfer. More than 1.5 million Canadians use Shakepay today. Regulated as an investment dealer across all Canadian provinces and territories, Shakepay is backed by renowned venture capitalists with $44M in funding.