Senior Security Engineer: Vulnerability & IR Lead

Far Coder; Canada; On-site; CAD 144,000 - 202,000; Full time

Benefits offered by this job

Health and wellbeing

Maternity and parental leave top-up

Competitive health benefits

Generous PTO

RSU program

Retirement matching

Free 1Password account

Community

Paid volunteer days

Peer-to-peer recognition

Remote-first work environment

Job summary

1Password is seeking a Senior Security Engineer in Vulnerability Management to lead incident response and mature our PSIRT program across product, platforms, and infrastructure. This role focuses on coordinating vulnerability disclosures, triage, and remediation, in collaboration with Engineering, Legal, and Communications teams.

The position supports a remote work model within Canada and the US, with responsibilities spanning AI-generated tooling integration and post-incident reviews to drive

Qualifications

• 5+ years of IT or engineering experience with a security focus.
• Hands-on incident response experience in a product/SaaS context.
• Experience with coordinated vulnerability disclosure (CVD).
• Able to make clear, defensible decisions under time pressure.
• Experience building incident response playbooks and escalation processes.
• Experience drafting or contributing to security advisories/CVEs.

Responsibilities

• Lead end-to-end response to product security incidents from discovery to disclosure.
• Own and evolve PSIRT functions, including classification frameworks and escalation paths.
• Drive CVD processes with bug bounty programs and external researchers.
• Coordinate across Product Security, Engineering, Legal, Communications, and Customer Success during incidents.
• Lead post-incident reviews and translate findings into systemic improvements.
• Develop incident response tooling, automation, and reporting to reduce time to detect/respond.
• Contribute to customer-facing security advisories and CVE disclosures.
• Evaluate and integrate AI-powered tooling for incident detection/response.
• Mentor engineers and help mature security incident response capabilities.
• Serve on an on-call rotation with after-hours coverage.

Skills

Security incident response

Vulnerability disclosure

AI/ML in security

Forensic analysis

Communication skills

Code reading

Job description

1Password is seeking a Senior Security Engineer in Vulnerability Management to lead incident response and mature our PSIRT program across product, platforms, and infrastructure. This role focuses on coordinating vulnerability disclosures, triage, and remediation, in collaboration with Engineering, Legal, and Communications teams.

The position supports a remote work model within Canada and the US, with responsibilities spanning AI-generated tooling integration and post-incident reviews to drive