Security Engineer

About this role

Canals seeks a senior security engineer to lead security strategy and execution across their growing wholesale distribution software platform. You'll own high-impact risk identification and remediation while staying hands-on with production systems, application security tooling, threat modeling, and incident response.

What you'll do

• Identify and lead end-to-end remediation of highest-impact security risks
• Own application security tooling for code, dependencies, and secrets management
• Conduct threat modeling, risk assessments, and architecture reviews for services
• Validate and triage findings from bug bounties and penetration tests
• Lead security monitoring, incident response, investigations, and follow-through

What they're looking for

• Production systems security hardening
• Application security and secure coding practices
• CI/CD and infrastructure-as-code security integration
• Threat modeling and risk assessment
• Security incident response and investigation
• Cross-team communication and project ownership
• Remote collaboration in fast-paced environments
• Bug bounty and penetration test triage

Benefits

• Meaningful impact on a rapidly growing, profitable company
• Ownership of security outcomes with autonomy to shape strategy
• Remote-first, flexible work distributed across North and South America
• Work with ambitious, thoughtful teammates in a transparent, collaborative culture
• Opportunity to secure a platform serving critical business workflows at scale