Senior Security Engineer

At Shakepay, we’re on a mission to usher in the Bitcoin golden age. We’re reimagining financial services to give every Canadian their fair shake.

Our culture is built around doing work that matters, winning as a team, and celebrating success. If you're the kind of person who values growth, shipping fast, and sharing your ideas openly with a group of like-minded people, come and build with us!

About Shakepay

Since 2015, we’ve been building the Shakepay app to make buying and earning bitcoin fast, easy, and secure. In 2022, we launched the Shakepay Card, allowing shakers to earn bitcoin rewards when they shop. Today, more than one million Canadians use Shakepay to grow their bitcoin savings and take control of their financial future. 

We’re regulated across all Canadian provinces and territories, and backed by renowned venture capitalists with a funding of $44M. We have a passionate, loyal, and growing community, and we’re looking for people who want to help us build something truly special.

Senior Security Engineer

Welcome to the crypto world where money is data and therefore data breaches could kill a startup. Have a look at the blockchain graveyard: https://magoo.github.io/Blockchain-Graveyard/.

The tl;dr of your role is having Shakepay never show up there.

As a Senior Security Engineer, you will play a pivotal role in safeguarding Shakepay’s digital assets, infrastructure, and our customer’s data against cyber threats. You will leverage your deep technical expertise in identifying, developing, and implementing security measures, protocols, and strategies collaboratively across various domains. This role will have an outsized impact on Shakepay’s environment and the security of Shakepay and our customers’ assets and data.

This role will report to the Head of Security.

What you'll be doing

• Work closely with across all of Shakepay to design and drive high impact solutions with the right balance between security, customer experience, and product growth
• Be a subject matter expert and mentor across multiple domains within security and provide impactful output that can be ingested by both operational and engineering focused teams
• Manage relationships, internally and externally, regarding Security processes, services, and vendors.
• Lead threat modeling discussions for both existing production systems and systems in development
• Own maintaining and improving our Zero Trust environment
• Build, tune, and automate alert responses in code
• Participate in an on-call rotation and serve as the technical lead during incidents
• Participate in governance, compliance, and regulatory audits (SOC2, ISO 27001, PCI, etc.)

Who we are looking for

• 5+ years of broad Security experience, including but not limited to; Enterprise & Operational Security, Incident Response, Offensive Security, GRC, and Product Security.
• 5+ years experience in a cloud environment (AWS preferred)
• Proficiency in a high-level programming language for building and maintaining our alerting capabilities and to automate Security tasks
• Clear sense ownership and exceptional communication skills to manage expectations, timing, scope, and priority of the work you’re responsible for
• Passion for scaling Security through simplicity and enabling a Security first culture
• Experience in a highly regulated environment (preferably a startup)

Bonus points

• Experience with software development and ability to impact product directly
• Knowledge of the technology behind Bitcoin
• Experience with Git (GitHub preferred) for project and process management 
• Cryptography knowledge

Why join us?

• Help shape the future of money: Be part of a team that's revolutionizing financial services in Canada, one sat at a time.
• Impact millions: As cryptocurrency continues to gain traction, our potential for growth is massive. You can help us bring Shakepay and Bitcoin to all Canadians.
• Grow your career: We’re growing, and so can you! We have programs in place to encourage continuous learning, growth, and development.
• Ideas, not titles: We want the best ideas to make their way through, no matter where they come from.

• Competitive compensation and stock options: Get rewarded with competitive pay and join our employee stock option plan.
• Health benefits from day 1: Access to comprehensive health and dental coverage, including health and wellness spending accounts. 
• Remote-friendly: Work from anywhere in Canada, with optional access to our office spaces in Montreal and Toronto.
• Learning and development: A $2,000 annual budget for courses, certifications, and training to support your career growth.
• Time off: 20 days of vacation per year. And if you use all your vacation, we give you a $1,000 bonus.
• Parental leave: Enjoy a parental leave top up to 100% of your salary for 18 weeks.
• Home office setup: A MacBook, a $1,200 budget for home office improvements, and a monthly stipend for home and internet expenses.
• Salary in bitcoin option: Choose to receive your salary in bitcoin – the soundest money to ever exist.
• Team and company offsites: Whether team-specific or company-wide, these events offer a great chance to connect and collaborate in person.

Fluency in English is required due to the percentage of English-speaking customers and the nature of our platform, which is available to all Canadians.