Security Engineering Manager

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineering Manager based in Canada.

This role leads the security function supporting a modern, API-first healthcare technology platform and its underlying cloud infrastructure. You will combine people leadership with hands-on engineering to establish security strategy, strengthen infrastructure, and enable compliant product development. The position spans AWS security, application and endpoint security, software development lifecycle controls, vulnerability management, and compliance engineering. You will manage a talented security team while remaining deeply involved in technical work such as infrastructure-as-code, security tooling, and operational playbooks. Working across engineering and leadership, you will make security a shared responsibility without creating unnecessary friction for product teams. This is an opportunity to shape a scaling security organization in a highly automated, remote-first environment.

• Lead, develop, and grow a high-performing security engineering team, setting clear expectations, maintaining rigorous quality standards, and hiring additional talent as the function scales.
• Own and evolve the overall security strategy across AWS infrastructure, application security, endpoint security, software development lifecycle processes, and compliance.
• Remain hands-on in technical security work, including writing AWS CDK in TypeScript, building security tooling and playbooks, and personally driving critical security initiatives.
• Oversee compliance engineering and ensure processes, controls, and evidence support applicable SOC, HIPAA, and HITRUST requirements.
• Assess vulnerabilities and security risks regularly, prioritize remediation according to business and customer impact, and ensure critical issues are addressed effectively.
• Manage day-to-day security engineering activities, balancing project timelines, resources, priorities, and quality of execution.
• Establish clear performance expectations, monitor progress, and increase accountability across the team.
• Mentor security engineers and foster a culture where security is treated as a shared responsibility across engineering and the broader organization.
• Partner with engineering teams to embed secure and compliant development practices into their workflows while minimizing unnecessary operational friction.
• Support security across a highly automated AWS environment built predominantly with serverless technologies and infrastructure-as-code.

Requirements:

• 6+ years of experience in security or closely related security engineering roles, including at least 3+ years in a management or people-leadership position.
• Experience working with security and compliance frameworks such as SOC, HIPAA, and/or HITRUST, including control design and implementation.
• Hands-on experience with application security and endpoint security.
• Strong technical understanding of cloud security, particularly within AWS environments.
• Experience working with infrastructure as code and the ability to contribute directly to technical security initiatives.
• Exceptional written communication skills, with the ability to synthesize complex technical, security, and risk information for both engineering teams and executive stakeholders.
• Proven experience leading and collaborating effectively within a remote-first environment, maintaining team alignment, communication, and cohesion.
• Strong people-management skills and a demonstrated commitment to developing high-performing teams.
• Ability to manage multiple areas of responsibility simultaneously while maintaining thoughtful attention to important technical and organizational details.
• Comfortable switching between strategic planning, people leadership, and hands-on technical work as priorities evolve.
• Strong judgment when evaluating security risks, prioritizing remediation, and balancing security requirements with business and engineering needs.
• Demonstrated ability to operate effectively in fast-moving, highly automated environments with evolving priorities.
• Alignment with a high-accountability, collaborative, curious, and engineering-focused approach to work.

Benefits:

• Fully remote position available in Canada or the United States.
• Full-time employment.
• Opportunity to lead and shape a growing security engineering function.
• Hands-on technical leadership within a modern AWS and serverless environment.
• Opportunity to work on security and compliance supporting healthcare technology and mission-critical transactions.
• Remote-first environment designed around collaboration and distributed teams.
• Significant ownership over security strategy, engineering standards, and team development.
• Opportunity to work across cloud infrastructure, application security, endpoint security, compliance, and software development lifecycle security.
• High-impact role with the ability to influence how engineering teams build secure and compliant products.
• Candidates are encouraged to apply even if their experience does not perfectly match every requirement.