Lead Security Engineer

📋 Description

• Lead, coach, and grow the Security team, including hiring, performance, priorities, and career
• Own Canary's security and compliance program (SOC 2, PCI DSS, GDPR/CCPA, and other applicable
• Serve as the primary security point of contact for Canary
• Own vendor and third-party risk management
• Write, maintain, and communicate security policies and standards company-wide; run security
• Set technical direction for security tooling and stay hands-on in architecture and threat-model

🎯 Requirements

• 8+ years in security engineering, including 2+ years leading a team as a manager or tech lead
• Proven experience owning compliance programs end to end (SOC 2 Type II, PCI DSS, ISO 27001, or
• Exceptional written and verbal communication
• Hands-on technical foundation in cloud security (AWS), identity and access management, application
• Experience with vendor risk management and reviewing security terms in customer and vendor contracts
• Track record of building pragmatic, risk-based security programs at a growth-stage SaaS company

🎁 Benefits

• Unlimited PTO
• Holidays + Canary Days (monthly company-wide days off)
• Birthday Holiday
• Office Exchange: travel stipend to visit SF, NY, or Dallas hubs
• Canary Hotel Experience: credit toward stay at Canary hotels
• Preferred Hotels Discount: minimum 30% off at select partner hotels globally