Sr. Staff Security Engineer

📋 Description

• Security architecture ownership across cloud, apps, identity, networks, and data.
• Lead threat modeling for product, engineering, and infra.
• Architecture reviews balancing risk, usability, and delivery speed.
• Scale review processes with self-service patterns and risk tiers.
• Partner with tech and enterprise leads to embed security governance.
• Define security standards for API security, OAuth/OIDC, SAML, HL7, FHIR.

🎯 Requirements

• Bachelor’s degree in CS or related field, or equivalent experience.
• 10+ years security experience; 5+ years in security architecture.
• Expertise in app security, cloud security, IAM, network security, data protection.
• Hands-on cloud security: encryption, key management, secrets mgmt, cloud-native security.
• Threat modeling experience (STRIDE, PASTA) and mentoring others.
• Strong knowledge of secure SDLC, OWASP, OAuth2.0, OIDC, SAML.

🎁 Benefits

• Remote work opportunity for US-based or Toronto employees.
• Medical, dental, vision insurance.
• FSA/HSA options.
• Flexible PTO and 401(k) with match.
• Life and pet insurance.
• Autonomy and opportunities to influence architecture.