Security Engineer

Clutch Canada; Vancouver; On-site; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation

Work remotely anywhere in your respective country

Paid time off and flexible leave policy

Flexible working hours

Tech reimbursements

Job summary

Clutch Canada is hiring a Security Engineer for their Vancouver team. This remote role focuses on protecting infrastructure, product, and user data as the company scales. Responsibilities include building security controls, conducting vulnerability assessments, and managing incident responses. Ideal candidates should have 3+ years in security engineering, strong backend development skills, and familiarity with cloud security. Enjoy flexible working conditions and competitive compensation in a dynamic, inclusive environment.

Qualifications

• 3+ years of experience in security engineering, backend or infrastructure security.
• Strong backend development experience with Node.js/TypeScript.
• Ability to ship code end-to-end.
• Good understanding of authentication, authorization, cryptography, and common vulnerabilities.
• Experience with cloud security, preferably GCP or AWS.

Responsibilities

• Build and improve security controls across product, backend, and infrastructure.
• Run vulnerability assessments, penetration testing, and security audits.
• Automate security checks, alerts, and vulnerability workflows.
• Support incident response and security investigations.

Skills

Security engineering

Backend development with Node.js/TypeScript

Problem-solving skills

Communication skills

Tools

Burp Suite

Metasploit

Wireshark

GCP

AWS

Kubernetes

Docker

Job description

Overview

Security Engineer, Vancouver – Engineering – Remote – Full-time

Fireflies.ai is the #1 AI teammate for meetings, trusted by over 20 million people across more than 500,000 organizations. Fireflies enables teams to capture knowledge, automate repetitive tasks, and enhance productivity before, during, and after every meeting. The company is valued as a unicorn and is expanding globally. This role focuses on protecting infrastructure, product, and user data as the company scales.

What You’ll Do:

• Build and improve security controls across our product, backend, and infrastructure.
• Review code, architecture, and infrastructure for security risks.
• Run vulnerability assessments, penetration testing, and security audits.
• Debug and patch security issues in backend systems.
• Manage bug bounty triage and remediation workflows, including HackerOne.
• Automate security checks, alerts, and vulnerability workflows.
• Partner with engineering teams to promote secure coding practices.
• Support incident response and security investigations.
• Configure and maintain security tools such as firewalls, IDS/IPS, scanners, and monitoring systems.

What You Need:

• 3+ years of experience in security engineering, backend security, or infrastructure security.
• Strong backend development experience with Node.js/TypeScript.
• Ability to ship code end-to-end.
• Good understanding of authentication, authorization, cryptography, and common vulnerabilities.
• Experience with security testing tools such as Burp Suite, Metasploit, Wireshark, or similar.
• Experience with cloud security, preferably GCP or AWS.
• Familiarity with Kubernetes, Docker, and modern infrastructure security.
• Strong problem-solving and communication skills.

Nice to Have:

• Experience with SaaS or high-growth startup environments.
• Bug bounty program experience.
• Experience with SOC 2, HIPAA, GDPR, Vanta, or GitHub Advanced Security.
• Contributions to the security community, such as CVEs, talks, or open-source work.
• Experience with DevSecOps or security automation.

Tech Stack:

• Node.js, TypeScript
• MongoDB
• Kubernetes, Docker
• GCP
• Pub/Sub architecture
• HackerOne, Vanta, GitHub Advanced Security

Values that are important to us:

• You should be a great communicator and culture maintainer
• Take a look at our culture document
• You're data-driven and customer-focused
• You value fast & incremental engineering cycles
• You maintain design excellence and minimise complexity
• You measure your results & automate when possible
• You get 10% better at something every week
• You have an internal compass and take accountability & initiative
• We value overcommunication, candid feedback and a results-driven culture

Perks and Benefits:

• Competitive compensation
• Work remotely anywhere in your respective country
• Ability to move laterally within a team and grow rapidly
• Paid time off and flexible leave policy
• No boss culture
• Flexible working hours
• LGBTQ+ friendly
• Company offsites
• Tech reimbursements

About us:

Fireflies.ai is revolutionizing how teams interact with AI in daily work. Our inclusive culture emphasizes security, innovation, customer experience, and growth. Backed by investors including Canaan and Khosla Ventures, we are a global team with members across 20+ countries. We are building a world-class, global-first company and dogfood our product to inform development.

We are an equal opportunity employer and value diversity. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.