Senior Platform Security Engineer

Procurify; Remote; CAD 122,000 - 157,000; Full time

Job summary

A tech company in Canada is seeking a Senior Platform Security Engineer to design and implement security capabilities for their cloud platforms. You will automate security within CI/CD pipelines and engage with engineering teams to uphold security best practices. The ideal candidate has over 5 years in DevSecOps, expertise in AWS, and a passion for security. This remote-first role offers a competitive salary and benefits, fostering personal and professional growth.

Benefits

Flexible working

Responsible time off

Extended health benefits

Stock options

Community initiatives

Qualifications

• 5+ years in DevSecOps or Infrastructure/Platform/Cloud security roles.
• Expert in securing cloud environments, preferably AWS.
• Experience with Infrastructure as Code (Terraform or equivalent).

Responsibilities

• Design, build, and implement automated security controls.
• Implement and manage security information and event management (SIEM) systems.
• Conduct security architecture reviews and provide guidance.

Skills

DevSecOps

Cloud Security

Kubernetes

AWS

Automation

Security Best Practices

Tools

Terraform

CircleCI

Python

AWS WAF

Job description

Senior Platform Security Engineer

Remote within Canada

About The Team:

The DevSecOps team owns the security, reliability, and overall management of Procurify’s cloud platform. We design and operate scalable Cloud Infrastructure, implement and champion SRE best practices, and ensure the platform is resilient, cost-efficient, secure, and compliant. The DevSecOps team partners with other engineering teams to embed security and reliability into every stage of the software lifecycle—providing the tools, automation, and guardrails that empower teams to build and operate services with confidence.

About The Role:

As a Senior Platform Security Engineer, you will design and build the security capabilities embedded into our cloud and developer platforms. Customer trust is our most important asset, and this role is at the heart of upholding that commitment. You will be a hands‑on expert building security directly into our infrastructure, shifting security left in our developer workflows, and promoting a security‑first culture across engineering

What You’ll Be Working On:

• Build & Automate Security Guardrails: Design, build, and implement automated security controls directly within our CI/CD pipelines and Cloud Infrastructure. You will use an automated, repeatable approach to make security a seamless, default part of our development process and underlying cloud environments.

• Evolve Threat Detection & Response: Implement and manage our security information and event management (SIEM) systems. You’ll develop strategies for threat detection, evolve security incident response processes, and conduct security incident reviews to continuously improve our security posture.

• Champion Application & Cloud Security: Partner with product engineering teams on practical threat modeling and risk reduction. You’ll conduct security architecture reviews and provide expert guidance on securing our cloud‑native applications, data and AI workloads, and Kubernetes environment on AWS.

• Lead Security Awareness: Educate and empower your engineering colleagues by sharing your expertise on security best practices (e.g. OWASP Top 10), threat modelling frameworks, and by running security-focused initiatives

• Support your team: Participate in the DevSecOps on‑call rotation across cloud infrastructure, Kubernetes, and CI/CD systems. You will apply your foundational expertise to diagnose, remediate, and prevent platform issues confidently and effectively.

Our Tech Stack:

• Cloud: AWS
• Security Tools: AWS WAF, GuardDuty, SonarCloud
• Infrastructure as Code: Terraform
• CI/CD & Automation: CircleCI, Python, Bash
• Containers & Orchestration: Kubernetes, Docker, ArgoCD
• Observability: Prometheus, Grafana, Kibana, New Relic
• Application: Python/Django, Typescript/React

Lead With CARES:

• Commitment: Demonstrates accountability and follow‑through, delivering reliably and owning outcomes in a way that others can depend on.
• Ambition: Takes initiative with curiosity and a growth mindset, pursuing bold ideas that elevate impact and performance.
• Resilience: Shows adaptability, composure, and perseverance through challenges, staying focused and effective in a fast‑changing environment.
• Excellence: Brings rigor, collaboration, and a strong quality focus to deliver high‑performing solutions and raise the bar for outcomes.
• Simplicity: Applies focus, clarity, and streamlining to cut through complexity and enable efficient, impactful execution.

What You Bring:

• Proven Hands‑On Experience: 5+ years in DevSecOps or Infrastructure/Platform/Cloud security roles, or experience in SRE, Cloud Infrastructure or DevOps roles with security as a primary focus.
• Cloud & Container Orchestration: You are an expert in securing cloud environments (AWS preferred) and cloud‑native applications running in Kubernetes. You have a solid understanding of Kubernetes and Cloud Infrastructure fundamentals, and are comfortable working hands‑on across the platform for day‑to‑day operations.
• Security as Code & Automation: A strong belief in automating everything. You have experience integrating SCA, SAST and DAST tools into software development workflows. You are proficient with Infrastructure as Code (Terraform or equivalent) and have experience working with at least one higher level language such as Python, Ruby or Go (Python preferred).
• Security and Compliance Expertise: Practical experience working with and implementing controls for compliance frameworks such as SOC 2, ISO 27001, or PCI DSS. Strong understanding of security best‑practices and the OWASP Top10.
• Securing AI Integrated Systems: Familiarity with the attack vectors and security concerns associated with Agentic AI workflows and other AI product integrations is a plus.
• A Builder’s Mentality: You are passionate about building and scaling security programs, not just operating them. You thrive on the opportunity to create new systems, automate processes, and have a high degree of ownership.
• Empathetic & Accountable: A collaborative, “low‑ego” partner to development teams. You lead with empathy, believe that your team’s success is your success, and take initiative in an autonomous environment.
• Exceptional Communicator: You excel at explaining complex security concepts to both technical and non‑technical audiences, fostering a shared sense of responsibility for security across the company.
• Maintains a professional and current LinkedIn profile, ensuring it is updated upon joining Procurify to reflect their new role and maintain a consistent company presence.

What Makes Procurify a Great Place to Work for Engineers:

• A modern tech stack with opportunities to influence future architecture.
• A culture committed to learning, experimentation, and engineering excellence.
• Clear technical vision and empowered teams who own their outcomes.
• Genuine collaboration, psychological safety, and a people‑first culture.
• Meaningful problems to solve with real customer and business impact.

WHY PROCURIFY?

We’re committed to helping mission‑driven organizations spend smarter

Procurify is a remote‑first company with a big heart and a strong ambition to modernize the way organizations manage business spend. We’re looking for talented and team‑driven individuals to join us on our journey to build a place where the best people want to work – a place where every team member is empowered to apply their best thinking, push boundaries thoughtfully, and drive high performance together.

You’re empowered to do your best work

We’ve created an environment where personal and professional growth is a real priority.

Some of the great perks we offer include:

• Flexible working: We’re a remote‑first organization with flexible working hours. Work anywhere from within Canada!
• Responsible time off: We trust our team to take the time they need to rest and recharge while staying accountable to their commitments.
• Extended health benefits: We prioritize our team’s health and well‑being. We offer a competitive health, vision, and dental package along with an Employee Assistance Program (EAP), and a health and wellness spending account.
• Community initiatives: We have a strong commitment to the community. Join one of our regular community days, donate to our Donate Your Day program, and get involved with one of our lunch and learns.
• Stock options: Everyone has a chance to own a part of Procurify with our competitive stock program.
• DEI initiatives: We regularly run a diversity, equity, and inclusion roundtable where we host guest speakers and tackle the topics that matter.
• Base Salary Range: $122,000 - $157,000 CAD (This range is dependent on experience and not inclusive of any bonus, commission, benefits or equity that might exist in your total compensation package.)

We have an amazing team

We’ve welcomed team members who were boat captains, funeral directors, swing dancers, competitive gamers, plumbers, and novelists. Everyone has a story and we’re here to embrace them!

LEARN MORE

Procurify is an Equal Opportunity Employer. We do not discriminate against any team members or applicants for employment because of race, color, disability, sex, age, national origin, religion, sexual orientation, or gender identity and/or expression.

If you feel like you don’t meet all of the requirements for this role, we encourage you to apply anyway. We know that feelings of imposter syndrome can get in the way of meeting incredible candidates, and we certainly don’t want those feelings to get in the way of meeting you! We really want to get to know you and why you’re great for the role. Please avoid including your picture and age on your resume.

Apply online today and let’s start a conversation.

To learn more about Procurify, check out these resources:

• Check out what our customers are saying about us

• Learn more about our procure‑to‑pay platform