Senior Product Security Engineer

Overview

Lead the design and implementation of secure, scalable products across an AI-native platform. Partner with architecture, engineering, product, governance, and compliance teams to embed security throughout the software and AI development lifecycle.

What you'll do

• Architect security controls for AI/ML systems, including training, data pipelines, inference, and agentic workflows.
• Identify and mitigate AI-specific risks such as prompt injection, data poisoning, model inversion, and model theft.
• Define secure development standards and embed security, privacy, and compliance by design.
• Lead threat modeling, secure design reviews, and risk assessments.
• Build security automation and governance into development workflows.
• Produce customer-facing security questionnaires, whitepapers, and trust collateral.
• Mentor teams through secure coding, AI risk management, documentation, and training.

What you'll need

• 5–7+ years of product, application, or cloud security engineering experience.
• Deep knowledge of secure SDLC, threat modeling, and secure architecture.
• Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure.
• Cloud security expertise across multi-cloud environments.
• Familiarity with DevSecOps and CI/CD environments.
• Knowledge of encryption, authentication, and authorization patterns.
• Ability to drive cross-functional security initiatives and influence architectural decisions.

Nice to have

• Python, Java, or JavaScript proficiency for security automation.
• Container, Kubernetes runtime, or software supply chain security experience.
• Bug bounty program experience.
• Familiarity with SOC 2, ISO 27001, NIST 800-53, or NIST AI RMF.
• CKS, CISSP, CSSLP, or AI/ML security credentials.

Details

• Remote in Canada.
• Base compensation: CAD 159,000–219,000 yearly.