Lead Security Engineer

About the role

Canals is scaling rapidly and needs a senior security engineer who can think system‑wide, own security outcomes and raise the security bar across product and infrastructure.

Key responsibilities

• Identify the highest‑impact security risks and lead remediation end‑to‑end.
• Own application security tooling for code, dependencies, and secrets.
• Lead threat modeling, risk assessments, and architecture reviews for new and existing services.
• Validate and triage findings from bug bounties and penetration tests.
• Lead security monitoring and incident response, including alerts, investigations and follow‑through.

Required profile

• Strong security engineering background with hands‑on experience securing production systems.
• Ability to drive remediation across teams with clear priorities and follow‑up.
• Comfort taking ownership of deliverables and ensuring high‑standard project delivery.
• Strong communication skills and ability to work remotely in a fast‑moving, product‑focused environment.

Required skills

• Application security tooling (SAST, dependency scanning, secret management).
• Threat modeling and risk assessment.
• Security monitoring and incident response.
• Integration of security into CI/CD and infrastructure‑as‑code workflows.

What we offer

• Remote‑first, flexible work environment distributed across the Americas.
• Opportunity to shape security strategy in a fast‑growing, profitable company.