Senior Security Engineer 3, Product & Application Security

Pager; Toronto; On-site; CAD 139,000 - 207,000; Full time

Job summary

An established industry player is seeking a Senior Security Engineer to lead security initiatives for their SaaS offerings. This role involves collaborating with diverse teams to ensure secure, reliable, and scalable solutions. You'll drive security standards, conduct threat assessments, and mentor team members in a flexible, award-winning workplace. With a focus on application security and product integrity, this position offers the chance to make a significant impact in a dynamic environment. If you're passionate about security and eager to tackle complex challenges, this opportunity is perfect for you.

Benefits

Flexible workplace

Health benefits

Equity options

Bonus opportunities

Qualifications

• 4-5 years of experience in Security Engineering with a focus on cloud-native environments.
• Proficiency in at least one programming language and framework.

Responsibilities

• Define product security standards and conduct security reviews throughout product development.
• Mentor team members and participate in On-Call rotation for security issues.

Skills

Application Security

Product Security

Threat Modeling

Security Reviews

Analytical Skills

Communication Skills

Organizational Skills

Education

Bachelor's Degree in Computer Science or related field

Tools

AWS

Qualys

Nessus

Snyk

CircleCI

Terraform

SIEM

Kubernetes

Job description

PagerDuty, Inc. (NYSE:PD) is a global leader in digital operations management. Half of the Fortune 500 and nearly 70% of the Fortune 100 trust PagerDuty as essential infrastructure.

Join us. At PagerDuty, you'll tackle complex problems, collaborate with kind and ambitious people, and help build a more equitable world—all in a flexible, award-winning workplace.

PagerDuty is seeking a Senior Security Engineer to join our diverse, customer-focused team! As a Senior Security Engineer, you will be a key contributor in leading, driving and delivering security initiatives for PagerDuty’s SaaS offerings, focusing on application & product security through architecture reviews, threat modeling sessions, and defining secure-by-design product standards and protections that support PagerDuty’s security mission. Since we own and operate what we build, you’ll collaborate closely with engineers across many product development teams. You will work closely with our internal development teams to ensure we deliver secure, highly reliable, and scalable solutions to our customers.

This is an exciting opportunity to build security solutions that make developers and customers happy. The ideal candidate will have a blend of experiences across large enterprise environments and small or mid-size environments and will have focused on establishing security standards, coordinating with product development teams, developing strategies for secure-by-default architectures, and corresponding process and tooling selection and implementation.

KEY RESPONSIBILITIES

• Embrace the role of hands-on technical lead in defining product security standards and guiding platform protections.
• Establish criteria and conduct comprehensive security reviews throughout all stages of product development to identify and address security risks.
• Perform regular threat assessments, coordinate with third-party testers for penetration testing, and conduct internal penetration testing to identify and mitigate security risks.
• Mentor and guide team members to ensure product and business objectives are prioritized in project implementations, fostering a strong documentation culture with project charters and design documents.
• Work with loosely defined requirements where you exercise your analytical skills to clarify questions, share your approach, and collaborate with the team to design and implement effective security frameworks. Maintain a strong appetite for challenging problems with a high degree of ownership.
• Participate in the team’s On-Call rotation, triaging and addressing security issues as they arise, and implement measures to prevent future occurrences.
• Enable service team security implementations by developing security-as-code constructs, including infrastructure-as-code (IaC) modules, libraries and frontend components, while creating and maintaining developer-focused documentation to promote easy adoption.
• Establish and uphold baseline standards and hardened configurations for platform components.
• Continuously enhance security frameworks by focusing on product security standards and software supply chain protections, tailored for application security in cloud-native, microservices environments.

BASIC QUALIFICATIONS

• Proficiency with Application & Product Security typically associated with 4 - 5 years of experience in a Security Engineering role working with a cloud-native, microservices environment, preferably AWS.
• Familiarity with cloud-native product technologies including:
• Vulnerability detection via multiple approaches including SAST, DAST, SCA, and runtime (e.g., Qualys/Nessus, Wiz, Snyk, GHAS, Semgrep, etc.)
• CI/CD technologies and integrations (e.g., CircleCI, Buildkite, Helm, Terraform, Chef)
• Product security event logging standards and analysis tools (e.g., SIEM such as: SumoLogic, LogRythm, or Splunk, etc.)
• Security Incident Response & Risk Management processes and tools
• Proficiency in at least one programming language and framework (e.g. Python, Bash, Phoenix/Elixir, Java, Ruby on Rails), typically associated with 3 - 4 years of experience with the language/framework.
• Have exceptional written, oral communication, and interpersonal skills.
• Organizational skills with the ability to successfully manage multiple priorities and deadlines.

PREFERRED QUALIFICATIONS

• Ability to analyze complex problems, develop solutions under guidance, and assist in implementing these solutions with a growing set of change management skills.
• Possesses a strong sense of ownership and a keen discernment for excellence in securing systems within a SaaS environment, demonstrating the ability to distinguish what constitutes truly robust and effective product security.
• Current or past experience with obtaining and maintaining FedRAMP authorization.
• Experience working at a SaaS company larger than 1000 employees and $100M in revenue.
• Familiarity with Cloud Infrastructure security (such as AWS GuardDuty, AWS CloudTrail, AWS Secrets Manager, AWS IAM & Identity Center, AWS Control Tower, Azure Security Center, Microsoft Defender for Cloud, etc.)
• Familiarity with Container Security (e.g., Kubernetes, EKS, AKS, service mesh, baseline/benchmark hardening, identity and secrets orchestration, etc.)
• Demonstrated history of mentoring and coaching.

The base salary range for this position is 139,000 - 207,000 CAD. This role may also be eligible for bonus, commission, equity, and/or benefits.

About PagerDuty

PagerDuty, Inc. (NYSE:PD) is a global leader in digital operations management, enabling customers to achieve operational efficiency at scale with the PagerDuty Operations Cloud. The PagerDuty Operations Cloud combines AIOps, Automation, Customer Service Operations and Incident Management with a powerful generative AI assistant to create a flexible, resilient and scalable platform to increase innovation velocity, grow revenue, reduce cost, and mitigate the risk of operational failure. Half of the Fortune 500 and nearly 70% of the Fortune 100 rely on PagerDuty as essential infrastructure for the modern enterprise.

PagerDuty is Great Place to Work-certified, a Fortune Best Workplace for Millennials, a Fortune Best Medium Workplace, a Fortune Best Workplace in Technology, and a top rated product on TrustRadius and G2.

Additional Information

PagerDuty is committed to creating a diverse environment and is an equal opportunity employer. PagerDuty does not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, parental status, veteran status, or disability status.

PagerDuty is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application process. Should you require accommodation, please email [e-mail] and we will work with you to meet your accessibility needs.

PagerDuty uses the E-Verify employment verification program.