Senior Security Engineer

Venn (formerly Vault); Toronto; Hybrid; CAD 120,000 - 170,000; Full time

Benefits offered by this job

Equity in Series A company

Health, dental and vision benefits

Four weeks of vacation

Unlimited sick / personal days

Paid parental leave top up

Weekly lunches and paid dinners

Job summary

Venn is seeking a Senior Security Engineer in Canada to shape and scale security across the platform, with a focus on protecting identities, securing cloud operations, and aligning with risk and compliance. You’ll partner with engineering, product, and Risk & Compliance to embed security early and often.

You’ll lead incident response, drive vulnerability management, and help build a culture of security across teams while enabling rapid, safe experimentation with AI tools and third-party

Qualifications

• 7+ years of experience in security engineering, security-focused software development, or related fields.
• Experience maturing security at startups or high-growth companies.
• Strong backend coding skills (Java or Kotlin) with a bias for shipping fixes.
• Depth in two or more areas: application security, security operations, or governance, risk and compliance.
• Solid understanding of modern authentication/identity and cloud security (AWS).
• Experience leading incident response in production environments.
• Ability to communicate risk clearly to engineers and leadership.

Responsibilities

• Define and drive Venn’s security roadmap, prioritizing risks that matter to the business.
• Integrate security into product design and code reviews, especially where money moves.
• Protect customer identities and accounts across web, mobile, APIs, and partner integrations.
• Strengthen prevention, detection, and response across cloud environments; lead incidents end-to-end.
• Collaborate with Risk and Compliance to address fraud, abuse, and new threats.
• Automate security across the development lifecycle and infra, including vulnerability management and pen tests.
• Protect sensitive data with strong data security and privacy controls.
• Maintain security across people, devices, and internal systems; nurture a security-conscious culture.
• Manage third-party security risk with vendors, banking, card, and payment partners.
• Set guardrails for safe AI tool use; drive security governance including SOC 2 and PCI DSS readiness.

Skills

Security engineering

Startup security maturation

Java/Kotlin

Cloud security (AWS)

Incident response

Security governance & risk

Code reviews

Tools

AWS

Job description

About Venn

Venn is building the business banking Canadian companies should already have. For decades, business owners here have banked with institutions that were slow, expensive and not built for them. Venn gives them multi-currency accounts, global transfers, corporate cards and AI finance tools in one place, so they spend less time on their finances and more on their business.

Our founders both worked at Revolut before starting Venn and were raised by small business owners. Today more than 15,000 Canadian businesses run on Venn. We're the fastest-growing B2B fintech in Canada, and we ranked 10th among Canada's fastest-growing companies by revenue in 2026. Backed by Left Lane Capital, Gradient, Intact Ventures and XYZ Venture Capital we're Series A and have raised $26.5M to date.

About the Role

As a Senior Security Engineer, you’ll help shape how Venn keeps its platform, customers, and team secure. You’ll work across application security, security operations, and governance, risk and compliance, partnering closely with engineering, product, and Risk and Compliance. Your focus is building security into how we design and ship, so it scales with the business without slowing it down.

What You’ll Be Doing

• Define and drive Venn’s security roadmap, prioritizing the risks that matter most to the business.

• Build security into the product by partnering with engineering and product on design and code reviews, especially for features that move money.

• Protect customer identities and accounts across our web and mobile apps, APIs, and partner integrations.

• Strengthen prevention, detection, and response across our cloud environment, and lead incidents from triage through post-mortem.

• Partner with Risk and Compliance to stay ahead of fraud, abuse, and emerging threats.

• Automate security across the development lifecycle and infrastructure, including vulnerability management and regular penetration testing, so it scales without slowing teams down.

• Protect sensitive customer and company data with strong data security and privacy controls.

• Keep our people, devices, and internal systems secure, and build a security-aware culture across Venn.

• Manage third-party security risk, from vendors to our banking, card, and payment partners.

• Set practical guardrails for the safe use of AI and agentic tools across the company.

• Drive security governance, including policies, bank and partner security reviews, and SOC 2 [and PCI DSS] readiness.

What You’ll Need

• 7+ years of experience in security engineering, application security, or software engineering with a strong security focus.

• A track record of building or significantly maturing security at a startup or high-growth company.

• A builder’s mindset, with strong backend coding skills (Java or Kotlin preferred) and a bias for shipping fixes over filing tickets.

• Depth in at least two of application security, security operations, and governance, risk and compliance, and comfort working across all three.

• Strong understanding of modern authentication and identity, and how attackers target them.

• Hands-on cloud security experience, ideally in AWS.

• Comfort spanning both product and corporate security, from code reviews to devices and identity providers.

• Experience leading incident response in a production environment.

• Pragmatic, risk-based judgment and the ability to focus on what matters most.

• Clear communication that translates security risk for engineers, leadership, and partners.

Bonus Points

• Experience at a fintech, in payments, or in another regulated industry.

• Experience with fraud, anti-abuse, or KYC/KYB systems.

• Experience with SOC 2 or PCI DSS audits and bank partner security reviews.

• Experience with detection engineering and infrastructure as code.

• Familiarity with the security risks of AI and LLM-based tools.

• Certifications such as OSCP, OSWE, or GIAC.

How we work.

We raise the bar, own the outcome, challenge assumptions, win as one and move fast. In practice that means honest feedback, continuous iteration, and decisions grounded in data.

What we offer

• Equity in a Series A company, so you share in the growth you help build.

• Health, dental and vision benefits from your first day.

• Four weeks of vacation.

• Unlimited sick / personal days

• Paid parental leave top up

• Weekly lunches and paid dinners when work goes late

This posting is for an existing vacancy. We use AI tools in our process but people make every hiring decision. Venn is an equal opportunity employer and considers all qualified applicants without regard to any characteristic protected by law. Accommodations are available at any stage on request. We only contact candidates from an @venn.ca email or Ashby and will never ask for payment or banking details.