Lead Security Engineer

Job Summary

Leading a small team within the Platform organization, the full-time remote Lead Security Engineer will manage Canary's security and compliance program, oversee audits and policies, and serve as the primary security contact for customers and partners.

Key responsibilities

• Lead, coach, and develop the Security team, focusing on hiring, performance, and career growth
• Own the security and compliance program, including frameworks such as SOC 2 and PCI DSS
• Manage vendor and third-party risk, while maintaining and communicating security policies company-wide

Required qualifications

• 8+ years in security engineering with at least 2 years in a leadership role
• Proven experience managing compliance programs end to end (e.g., SOC 2 Type II, PCI DSS)
• Hands-on technical expertise in cloud security, identity management, and application security
• Experience with vendor risk management and contract security terms
• Track record of developing risk-based security programs in a growth-stage SaaS environment