Shakepay 高级安全工程师:加拿大远程,年薪17万-23万加元,负责产品与基础设施安全

岗位概况

Shakepay 招聘高级安全工程师，工作地点为加拿大远程，基本年薪范围为17万-23万加元，另有股权与福利。 该岗位是动手型技术岗位，覆盖应用、产品、基础设施、企业与可观测性等多个安全领域，与工程团队合作设计并落地可扩展的安全方案，同时以 AI 工具、智能体与自动化提升安全工作的规模与效果。 要求5年以上安全工程、软件工程或相关技术领域经验，并在安全方面有实质经验。

工作职责

• 设计并推动多个相关安全领域的解决方案，包括产品、内部应用、基础设施、企业系统与可观测性
• 为现有系统与新产品计划开展威胁建模
• 与工程团队合作，把安全嵌入开发与交付流程
• 建设、调优并自动化安全告警、检测、可观测性与响应流程，在能提升规模与效果的地方使用 AI 与智能体
• 参与并协助主导事件响应，加入值班轮换
• 支持治理、合规与监管工作，包括 SOC 2、ISO 27001、PCI 等
• 指导工程师并在组织内分享安全最佳实践
• 协助确定安全优先级与技术方向，并与内部利益相关方及外部安全供应商建立良好关系

任职要求

• 5年以上安全工程、软件工程或相关技术领域经验，并在安全方面有实质经验
• 在一个或多个安全领域有深厚技术功底，并能有效横跨相关领域工作
• 有高级动手经验，能用 AI 工具、智能体与自动化提升安全工程工作的规模与效果
• 有云环境工作经验，优先熟悉 AWS
• 有事件响应与值班轮换的动手经验
• 沟通能力强、技术判断清晰、有明确的主人翁意识

申请条件与限制

• 工作地点为加拿大远程，蒙特利尔与多伦多有可选办公空间，远程不等于全球可申请，居住地请以原帖核对
• 原帖要求英语流利，原因是客户多为英语使用者且平台面向全加拿大用户
• 基本年薪范围为17万-23万加元，实际薪酬视年限、技能与资质而定，另有股权、绩效调薪、健康与牙科保障及带薪休假
• 原帖说明招聘流程的某些环节会使用 AI 工具辅助安排、日程与沟通，但所有录用决定均由招聘团队做出

加分项

• 有金融科技、加密或受监管环境经验
• 有产品安全经验，能影响产品设计
• 有 AI 辅助安全测试、进攻性安全、漏洞研究、检测工程或安全可观测性经验
• 了解比特币并乐于深入学习
• 习惯用 Git 与 GitHub 协作

薪酬与福利

• 原帖写明基本年薪17万-23万加元，另有股权
• 原帖列出健康与牙科保障、每年20天假期、每年2000加元课程预算、远程工作与季度团建等福利，具体以原帖为准

岗位重点解读

• 核心是防御性安全工程：保护客户、系统与数据，同时保证产品迭代速度，而不是单点攻防
• AI 是工作方法：用 AI 工具、智能体与自动化扩大安全团队的覆盖面，是岗位的硬性要求而非加分项
• 合规是日常工作的一部分：SOC 2、ISO 27001、PCI 等监管要求会直接影响方案设计

申请准备建议（编辑解读）

• 准备一个自己主导过的安全方案案例，讲清覆盖的产品、基础设施或企业系统范围与落地效果
• 核对自己用 AI 工具与自动化提升安全工作的实际经验，能讲清具体场景而不是只写熟悉 AI
• 确认能否接受加拿大远程与值班轮换，并以原帖核对英语要求与薪酬范围

国际远程岗位，招聘地区：Remote (Remote, Canada)。 请核对原招聘中的居住地、工作许可、时区、语言与出差要求；远程岗位不等于全球可申请。 以下保留招聘来源英文原文。

Source job listing. Remote does not imply worldwide eligibility; confirm residency, time zone, language and work authorization on the original page.

At Shakepay, we’re on a mission to usher in the Bitcoin golden age. We’re reimagining financial services to give every Canadian their fair shake.

Our culture is built around doing work that matters, winning as a team, and celebrating success. If you're the kind of person who values growth, shipping fast, and sharing your ideas openly with a group of like-minded people, come and build with us!

About Shakepay

Since 2015, we've been on a mission to help Canadians build long-term wealth through bitcoin. Over the past few years, we've expanded beyond buying and selling bitcoin to offer a growing suite of everyday financial products - including the Shakepay Card, direct deposit, bill payments and Interac e-Transfer - making it easier to earn, save and use bitcoin every day. Today, more than 1.5 million Canadians use Shakepay to grow their bitcoin savings and take control of their financial future as we continue to push the boundaries of what modern financial services can look like.

We’re regulated as an investment dealer across all Canadian provinces and territories, and backed by renowned venture capitalists with a funding of $44M. We have a passionate, loyal, and growing community, and we’re looking for people who want to help us build something truly special.

About the security team

Security at Shakepay is a company-wide responsibility, supported by a small, high-impact team focused on protecting our customers, systems, and data while enabling product velocity and business growth.

The Security team works across application and product security, cloud and infrastructure security, enterprise security, security tooling, incident response, and emerging areas such as AI security. We work closely with Engineering, Platform, Risk, Compliance, and Product to build pragmatic controls and scalable security capabilities in a regulated fintech environment.

We’re building a modern security function where automation and thoughtful use of AI help us reduce repetitive operational work and increase our impact.

Senior Security Engineer

We’re looking for a Senior Security Engineer to help safeguard Shakepay’s infrastructure, products, and customer data while levelling up our AI platform, security capabilities, and observability.

In this role, you’ll be a hands-on technical contributor across multiple associated security domains, such as application, product, infrastructure, enterprise, and observability. You’ll partner closely with engineering teams to design and implement scalable security solutions that balance risk reduction, customer experience, and product growth.

You’ll be expected to work in an AI-forward way. Using AI tools, agents, and automation to increase your reach and keep pace with the scope and scale of Security at Shakepay is a core part of the role, not an optional skill. You’ll help level up our existing AI platform and apply AI to security engineering, observability, testing, detection, and response.

What you’ll be doing

• Design and drive security solutions across multiple associated domains, including product, internal applications, infrastructure, enterprise systems, and observability
• Conduct threat modeling for existing systems and new product initiatives
• Partner with engineering teams to embed security into development and delivery workflows
• Build, tune, and automate security alerts, detections, observability, and response workflows, using AI and agents where they can increase scale and effectiveness
• Participate in and help lead incident response as part of the on-call rotation
• Support governance, compliance, and regulatory efforts (SOC 2, ISO 27001, PCI, etc.)
• Mentor engineers and share security best practices across the organization
• Help shape security priorities and technical direction while building strong relationships with internal stakeholders and external security vendors

Who we’re looking for

• 5+ years of experience in security engineering, software engineering, or a related technical discipline, with meaningful experience working in security
• Strong technical depth in one or more security domains, with the ability to operate effectively across associated domains
• Advanced, hands-on experience using AI tools, agents, and automation to increase the scale and effectiveness of security engineering work.
• Experience working in cloud environments (AWS preferred)
• Hands-on experience with incident response and on-call rotations
• Strong communication skills, technical judgment, and a clear sense of ownership

Bonus points

• Experience working in fintech, crypto, or other regulated environments
• Exposure to product security and influencing product design
• Experience with AI-assisted security testing, offensive security, vulnerability research, detection engineering, or security observability
• Knowledge of Bitcoin and excitement to learn more
• Comfort using Git/GitHub for collaboration and process management

Why join us?

• Help shape the future of money: Be part of a team that's revolutionizing financial services in Canada, one sat at a time.
• Impact millions: As cryptocurrency continues to gain traction, our potential for growth is massive. You can help us bring Shakepay and Bitcoin to all Canadians.
• Grow your career: We’re growing, and so can you! We have programs in place to encourage continuous learning, growth, and development.
• Ideas, not titles: We want the best ideas to make their way through, no matter where they come from.

Perks and benefits

• Be an owner
• Every employee has stock options as part of their total compensation.
• Reach your goals
• Quarterly performance and salary assessments, we’re here to be proactive about compensation and reward our top-performers.
• Generous AI token budget
• Health & wellness : Access to health and dental coverage, including health and wellness spending accounts.
• Remote-friendly: Work from anywhere in Canada, with optional access to our office spaces in Montreal and Toronto.
• Level Up: A $2,000 annual budget for courses, certifications, and training to support your career growth.
• Time off: 20 days of vacation per year. And if you use all your vacation, we give you a $1,000 bonus.
• Parental leave: Enjoy a parental leave top up to 100% of your salary for 18 weeks.
• Have fun together: quarterly team-specific or company-wide offsite to connect with each other.

The base salary range for this position is 170,000 - 230,000 CAD. Base pay may vary based on factors such as years of experience, skills and qualifications. Additionally, employees are eligible for equity, pay increases based on performance, benefits including health and dental care, and paid time off.

We understand that potential can be just as valuable as experience. If you're eager to learn, grow, and contribute to the mission but worry that you may not have the “right” experience, we still want you to apply. We encourage applications from everyone, regardless of background and life experience. We’re firm believers that a little bit of slope makes up for a lot of y-intercept.

We use technology, including artificial intelligence (AI), to support certain parts of our hiring process. This can include tools that assist with scheduling, application review, candidate communications, and generating interview notes, guides, or summaries so our team can stay focused on the conversation. All hiring decisions are made by our hiring team.

Fluency in English is required due to the percentage of English-speaking customers and the nature of our platform, which is available to all Canadians.