Staff Security Engineer

• Security at Shakepay is a company-wide responsibility, supported by a small, high-impact team focused on protecting our customers, systems, and data while enabling product velocity and business growth
• The Security team works across application and product security, cloud and infrastructure security, enterprise security, security tooling, incident response, and emerging areas such as AI security. We work closely with Engineering, Platform, Risk, Compliance, and Product to build pragmatic controls and scalable security capabilities in a regulated fintech environment
• We’re building a modern security function where automation and thoughtful use of AI help us reduce repetitive operational work and increase our impact
• We’re looking for a Staff Security Engineer to help safeguard Shakepay’s infrastructure, products, and customer data while levelling up our AI platform, security capabilities, and observability
• In this role, you’ll be a hands‑on technical contributor across multiple associated security domains, such as application, product, infrastructure, enterprise, and observability. You’ll partner closely with engineering teams to design and implement scalable security solutions that balance risk reduction, customer experience, and product growth
• You’ll be expected to work in an AI‑forward way. Using AI tools, agents, and automation to increase your reach and keep pace with the scope and scale of Security at Shakepay is a core part of the role, not an optional skill. You’ll help level up our existing AI platform and apply AI to security engineering, observability, testing, detection, and response
• Design and drive security solutions across multiple associated domains, including product, internal applications, infrastructure, enterprise systems, and observability
• Conduct threat modeling for existing systems and new product initiatives
• Partner with engineering teams to embed security into development and delivery workflows
• Build, tune, and automate security alerts, detections, observability, and response workflows, using AI and agents where they can increase scale and effectiveness
• Participate in and help lead incident response as part of the on‑call rotation
• Support governance, compliance, and regulatory efforts (SOC 2, ISO 27001, PCI, etc.)
• Mentor engineers and share security best practices across the organization
• Help shape security priorities and technical direction while building strong relationships with internal stakeholders and external security vendors

Benefits

• Equity benefits: We believe everyone at Shakepay should benefit from building a generational company, so every shaker owns stock options
• Get paid in bitcoin: You can choose to take a percentage of your salary in bitcoin. Whether you opt for some or none, the choice to be paid in the hardest, soundest money the world has ever known is yours
• Remote friendly: With a flexible schedule, you can work on your own time, from home or anywhere. And if you’re close by, you’re welcome to work in our Montreal or Toronto offices whenever you want. Being a remote‑first company is awesome, but there’s value in spending time with your teammates and deepening these bonds. So, each shaker is entitled to 15 days of travel and accommodation to any Canadian city each year, covered by Shakepay
• Generous vacation: Time off is essential, and we highly encourage it. We trust you to take as much as you need, when you need it. Every team member is expected to take at least 20 days of vacation each year. To help make sure you do, after taking 20 days, shakers receive a $1,000 bonus to put towards their next vacation
• Insurance coverage: We offer health, dental, paramedical, disability, life, and travel coverage so you’re always at your best. On top of our insurance coverage, all shakers also get access to a health and wellness spending account
• Personal development: It’s a marathon, not a sprint. We’re here to help you define and hit your personal career goals so that you can get where you want to be. To support our team, every shaker gets a $2,000 yearly budget to spend on learning and development
• Working from home: Working from home should be comfortable. Every shaker gets $1,200 to spruce up their home office and a monthly stipend for home and internet expenses
• Self‑sovereignty: The path to self‑sovereignty means being in full control of your coins. We offer a budget for shakers to get a self‑hosted wallet and to build a self‑hosted node

Experience working in cloud environments (AWS preferred)8+ years of experience in security engineering, software engineering, or a related technical discipline, with meaningful experience working in securityHands‑on experience with incident response and on‑call rotationsStrong technical depth in one or more security domains, with the ability to operate effectively across associated domainsStrong communication skills, technical judgment, and a clear sense of ownershipAdvanced, hands‑on experience using AI tools, agents, and automation to increase the scale and effectiveness of security engineering workExperience working in fintech, crypto, or other regulated environmentsExposure to product security and influencing product designExperience with AI‑assisted security testing, offensive security, vulnerability research, detection engineering, or security observabilityKnowledge of Bitcoin and excitement to learn moreComfort using Git/GitHub for collaboration and process management