Lead Security Engineer

About us

Our main product is a payroll and timekeeping app for hourly workforces, sold by subscription and supported from Toronto. Clients range from single-location retailers to franchise groups with hundreds of stores, all running our point-of-sale and loyalty software.

The position

SNC Systems is looking for a Lead Security Engineer to join a small, steady team. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This is a full-time remote role. We use an employer of record in the US, so you get a proper employment contract, not a freelance agreement. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. Good written English matters here, since most updates are written.

Responsibilities

• Review code and pull requests for security issues.
• Assess third-party vendors and SaaS integrations for security risk.
• Respond to security incidents and lead the technical investigation.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.

What you'll need

• 8+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Pay and benefits

Salary range: $194,000 - $240,000 annually

• Wellness allowance.
• Two weeks of paid leave at year end.
• Annual learning budget.
• Performance bonus.
• Public holidays observed per your country.
• Annual salary review.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at SNC Systems Inc..