Overview
Design, build and maintain secure authentication, OAuth, authorization and BYOK capabilities that protect Motive's products, infrastructure and customer data, embedding security across the software development lifecycle.
What you'll do
- Design, build, and maintain authentication flows and OAuth integrations across Motive's products.
- Build and evolve authorization platforms that enforce secure, scalable access to product capabilities and customer data.
- Develop BYOK capabilities and related security controls for customers with advanced data-protection requirements.
- Build and maintain security features, tooling, services, and automation across Motive's products and cloud infrastructure.
- Conduct architecture, code, data-handling, and threat-modeling reviews to identify and reduce security risks.
- Define and implement secure design patterns, controls, and repeatable guidance for engineering teams.
- Partner with product and engineering teams to remediate vulnerabilities and improve application security practices.
- Drive complex security projects independently from technical design through implementation, rollout, and ongoing improvement.
- Contribute to security testing, including SAST, DAST, dependency scanning, penetration testing, and attack-tree analysis.
- Mentor engineers and help build consensus around security-focused technical decisions.
What you'll need
- 5+ years of experience in software engineering, security engineering, application security, or a related discipline.
- Strong programming experience with Python, Go, JavaScript, or a similar language.
- Experience designing and implementing authentication, OAuth, authorization, or identity platforms.
- Experience identifying and remediating common application security vulnerabilities, including OWASP Top 10 risks.
- Experience designing and implementing security controls for cloud-based applications and infrastructure, particularly AWS.
- Experience with secure software development practices, threat modeling, vulnerability management, and security automation.
- Familiarity with Docker, Kubernetes, identity and access management, secrets management, encryption, and open-source security tooling.
- Strong cross-functional collaboration skills and the ability to communicate complex security concepts clearly.
Details
- Hybrid role based in Canada.
- Reports to Pankaj Moolrajani, Manager, Security Engineer.
- Some interviews or new-hire training sessions may be held in person at one of Motive's global offices.
Read the full description and apply on the company’s own careers page.