Lead Incident Security Responder

Job Summary

Driving applied product security work remotely in Canada, the full-time Lead Incident Security Responder will manage complex security projects, partner with engineering teams for architecture reviews and vulnerability triage, and support customer security inquiries while mentoring less experienced team members.

Key responsibilities

• Partner with engineering teams on architecture reviews, threat models, and security design feedback
• Triage product vulnerabilities and coordinate fixes with engineering while handling customer-facing communications
• Contribute to the secure development lifecycle and maintain detection content related to product security risks

Required qualifications

• 7-8 years of experience in product security, application security, or security engineering
• Hands-on knowledge of application security tooling (SCA, SAST, DAST) and familiarity with cloud platforms (AWS, Azure, GCP)
• Experience with AI and LLM tools for security work and sound judgment in validating AI-generated outputs
• Bachelor's degree in Computer Science, Information Security, Information Technology, or equivalent experience
• Experience with Product Security Incident Response Teams (PSIRT) or similar processes