Senior Security Engineer

Float; Canada; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A fintech company in Canada is seeking a Senior Security Engineer to enhance security protocols and support cloud operations. This role emphasizes a customer-centric approach through duties like improving AWS security guardrails and automating vulnerability management. Candidates should have strong technical skills in cloud security and a desire to contribute to a high-trust work environment. The position offers growth opportunities in a rapidly evolving field with a collaborative team culture.

Benefits

Competitive compensation

Equity options

Catered team lunches

Dog-friendly office

Flexible work model

Qualifications

• Strong background in security and cloud technologies.
• Familiar with CI/CD pipeline security practices.
• Experience with compliance frameworks like SOC 2.
• Knowledge of network monitoring and vulnerability scanning.

Responsibilities

• Own and improve AWS and GitHub security guardrails.
• Lead automation for vulnerability management.
• Partner with developers to embed secure SDLC practices.
• Contribute to evidence automation for PCI DSS 4.0.

Skills

Vulnerability management

Cloud technologies

Security automation

Threat detection

Infrastructure as Code (IaC)

Risk assessment

Intrusion detection

Security policies

Python scripting

Job description

About Float

Float is on a mission to simplify finance for Canadian businesses, empowering them to eliminate complexity and unlock new opportunities. Through our innovative platform, Float enables businesses to streamline financial operations and optimize cash flow, so they can focus on what matters most: growth.

As one of Canada’s fastest growing companies and top‑rated startups in 2024 and 2023, Float is customer‑obsessed, passionate and entrepreneurial, with a team that includes leaders from Uber, Shopify, Top Hat, TouchBistro, Bill, Stripe, and Ada.

At Float, everyone is an owner, bringing their unique perspective to our team and product. Your voice is important, and we take having a culture based on feedback seriously. We openly share our thoughts and differing opinions so we can continue to improve. We do our best to keep our decision‑making decentralized so that all team members feel ownership in our success.

Our Product

Float is Canada’s complete business finance platform, combining modern financial services and software to help businesses spend, save, and grow. Trusted by 5000+ Canadian companies, Float provides high‑limit corporate cards, automated expense management, next‑day bill payments, high‑yield accounts and fast, friendly support—all built in Canada, for Canada. Float is backed by world‑class venture and fintech investors, including Growth Equity at Goldman Sachs Alternatives and OMERS Ventures, partners behind our $70 million Series B raise.

Our team is a collection of ambitious, collaborative and mission‑driven people from all walks of life but with one goal: helping Canadian companies not just survive but thrive. And we’re looking for bold innovators to help shape the future of business finance in Canada.

AI Use in Our Hiring Process

We use technology, including artificial intelligence (AI), to support parts of our hiring process. This may include AI‑assisted scheduling and candidate communications, and AI‑generated interview notes, guides or summaries to help our team focus on the conversation. All hiring decisions are made by our hiring team.

About the Role

Float is building modern financial tools for businesses, and security is at the heart of earning customer trust. As a Senior Security Engineer, you’ll help us build and enforce the guardrails that let Float ship fintech features faster and with confidence. You’ll lead initiatives that turn “tooling installed” into controls enforced and measured, working hands‑on across Float’s infrastructure tool stack.

This role combines technical depth with a builder’s mindset. You’ll design secure patterns for infrastructure and application teams, automate evidence for PCI DSS 4.0 and SOC 2, and reduce risk through practical, measurable controls. You’ll partner closely with Platform, Engineering, IT, and Risk & Compliance to make security part of how Float operates every day.

What You’ll Be Responsible For

• Owning and improving AWS and GitHub security guardrails, including IAM, OIDC, network segmentation, and CI/CD hardening.
• Leading automation for vulnerability management and cloud posture using our security tools and infrastructure‑as‑code.
• Partnering with developers to embed secure SDLC practices, including dependency scanning, secret management, and threat modeling for high‑risk features.
• Helping mature endpoint and identity security while ensuring full coverage and strong baselines.
• Tuning and expanding detection and response capabilities, developing playbooks, alert pipelines, and response automation.
• Contributing to evidence automation for PCI DSS 4.0 and SOC 2, ensuring “compliance by default.”
• Championing security metrics that matter: coverage, time‑to‑remediate, and control effectiveness.

About You

Here’s what sets you up for success at Float:

• You Put Customers First, Always. You care deeply about delivering meaningful value. Whether you're building internal systems or customer‑facing features, you’re always thinking about how to make life better for our users.
• You Act Like an Owner. You take responsibility for outcomes, step up to challenges, and seek solutions proactively—doing what’s best for the business, not just your role.
• You Think Big and Move Fast. You’re energized by building from 0 to 1. You’re not afraid to challenge the status quo, experiment quickly, and learn as you go.
• You Constantly Learn and Grow. You’re hungry to improve your craft and open to feedback. You bring a growth mindset to everything you do.
• You Raise the Bar. You care about doing things well and efficiently. You balance speed with rigor and always look for ways to improve how we work.
• You Win as a Team. You’re a generous collaborator who values communication, context, and shared wins. You lift others up and help make the team stronger.

In addition to living our values, you bring:

• Technical Skills and Experience
  • Strong background in security, authentication, infrastructure, and cloud technologies, including vulnerability management and threat detection/remediation.
  • Familiarity with integrating security practices into CI/CD pipelines, ideally using tools such as Buildkite.
  • Understanding of Infrastructure as Code (IaC) security, particularly with Terraform.
  • Knowledge of compliance frameworks such as SOC 2 and ISO 27001.
  • Experience with risk assessment and management in cloud environments, as well as network monitoring and intrusion detection/prevention.
  • Hands‑on experience with vulnerability scanning tools and methods for identifying, prioritizing, and remediating vulnerabilities.
  • Strong grasp of common security vulnerabilities (e.g., OWASP Top Ten) and security testing techniques.
  • Experience with Auth0 and Okta for user management, SSO, and MFA.
  • Familiarity with implementing and managing IAM policies, RBAC, and user lifecycle best practices.
  • Experience securing PostgreSQL databases (access control, encryption, auditing).
  • Proficiency in Python for scripting, automation, and API integrations, including developing and maintaining security automation tools.
• Personal Attributes and Mindset
  • You can explain complex technical problems in simple terms, adapting your communication for different stakeholders.
  • You understand the business context and how your role supports the company’s vision and strategy.
  • You’re strategic yet detail‑oriented, capable of balancing long‑term goals with immediate tactical execution.
  • You ruthlessly prioritize competing demands and manage multiple responsibilities effectively.
  • You’re curious and committed to continuous learning, seeking to understand the “why” behind every solution and engaging thoughtfully in technical discussions.
  • You adapt quickly to change and maintain focus in a dynamic, evolving environment.

This may not be the role for you if…

• You’re not extremely detail oriented
• You aren’t a self‑starter and don’t like to work independently
• You’re not comfortable wearing multiple hats
• You don’t like change and adapting to new ways of doing things
• You aren’t comfortable with ambiguity
• You aren’t able to translate technical jargon into simple language
• You lack patience for iterative work
• You want detailed to‑dos for your tasks and projects
• You’re not keen on learning new things
• You don’t have strong stakeholder management skills
• You don’t like regular feedback on your work

Flexible Work Model

We believe in flexible work supported by meaningful in‑person collaboration. Team members within commuting distance of our Toronto office work in a hybrid model, while those based farther away primarily work remotely with occasional travel to Toronto for in‑person time. Specific expectations can vary by role and will be discussed during the interview process.

Why You Should Join

• Work at one of Canada’s fastest‑growing fintech companies
• Make a real impact in a high‑autonomy, high‑growth role
• Collaborate with an ambitious and supportive team
• Competitive compensation, equity options, and benefits
• Hybrid work model – we are based in Toronto with in‑office days for connection and collaboration
• Enjoy catered team lunches every Tuesday, Wednesday and Thursday
• Bring your pup to our dog‑friendly office
• Thrive in a high‑trust, high‑performance culture where your work truly matters

In Short

At Float, you’ll thrive if you’re bold, curious, and eager to make a real impact. We’re building something special—and having a lot of fun along the way. If you’re excited to build, grow, and win together, we’d love to meet you.

We’re committed to building a workplace that’s welcoming and accessible for everyone. If you need any accommodations during the hiring process or once you join Float, just let us know! You can reach out to Vic ([e-mail]), and we’ll work with you to make sure you have what you need to succeed.