Lead Security Engineer

Canals; Colombia; Híbrido; COP 90.000.000 - 150.000.000; Jornada completa

Descripción de la vacante

Canals is seeking a senior security engineer to own security outcomes across our product and infrastructure. You will drive remediation, own tooling for code security and secrets, and lead threat modeling and architecture reviews for services we build and scale.

You will triage bug bounty and pentest findings, contribute to security monitoring, and coordinate incident response. Remote-first, with teams across North and South America, you’ll influence security decisions in a fast-moving startup

Formación

• Strong security engineering background with hands-on experience securing production systems.
• Ability to drive remediation across teams with clear priorities and follow-up.
• Ownership mindset with delivering high-quality results.
• Excellent communication and ability to work remotely in a fast-moving product environment.
• Experience integrating security into CI/CD and infrastructure-as-code workflows.
• Prior startup or small team experience is a plus.

Responsabilidades

• Identify the highest-impact security risks and lead remediation end-to-end.
• Own application security tooling for code, dependencies, and secrets.
• Lead threat modeling, risk assessments, and architecture reviews for new and existing services.
• Validate and triage findings from bug bounties and pentests.
• Lead security monitoring and incident response: alerts, investigations, and follow-through.

Conocimientos

Security engineering

Remediation leadership

CI/CD security

Infrastructure as code

Threat modeling

Incident response

Herramientas

CI/CD tooling

Descripción del empleo

About Canals

Canals builds software for wholesale distributors, helping them operate more efficiently through automation and AI.

Our customers are the companies responsible for moving the materials that power the real economy; electrical supplies, plumbing products, roofing materials, HVAC equipment, and more. Every day, thousands of people rely on Canals to help process orders, manage purchasing, handle accounts payable, and streamline critical business workflows.

We're a profitable, rapidly growing company with a team of roughly 100 people distributed across North and South America. We care deeply about building great products, hiring exceptional people, and creating an environment where talented individuals can do the best work of their careers.

The Opportunity

Our customer base is growing rapidly. As more customers onboard and existing customers scale, the security surface of our platform grows with it. We’re looking for a senior security engineer who can move quickly, think system-wide, and raise the security bar across our product and infrastructure.

This role is about owning security outcomes, not just finding issues. You’ll identify the where there's risk and lead remediation. You’ll have the autonomy to shape our security strategy while staying deeply hands‑on with the systems that matter most.
What You’ll Do

• Identify the highest-impact security risks and lead remediation end-to-end.
• Own application security tooling for code, dependencies, and secrets.
• Lead threat modeling, risk assessments, and architecture reviews for new and existing services.
• Validate and triage findings from bug bounties and pentests.
• Lead security monitoring and incident response: alerts, investigations, and follow-through.

What We’re Looking For

• Strong security engineering background with hands-on experience securing production systems.
• Ability to drive remediation across teams with clear priorities and follow-up.
• Comfort taking ownership of deliverables and ensuring projects are delivered to a high standard.
• Strong communication skills and comfort working remotely in a fast-moving, product-focused environment.
• Experience integrating security into CI/CD and infrastructure-as-code workflows.
• Previous experience in high-growth startups or small teams is a plus.

Why Join Canals

We're building software that solves real problems for an industry that keeps the world running. Our customers rely on our platform every day to operate their businesses.

We've found strong product-market fit and continue to grow quickly, creating opportunities for people who want to have a meaningful impact on the trajectory of a company.

We believe great people build great companies. That's why we invest heavily in hiring, development, and creating an environment where talented individuals can do the best work of their careers.

You'll work alongside ambitious, thoughtful teammates who care deeply about what they do, challenge each other directly, and have a lot of fun along the way.

We value ownership, transparency, and continuous improvement. Good ideas can come from anywhere, and people are trusted to make things happen.

We're remote-first, flexible, and distributed across North and South America, bringing together talented people from a wide range of backgrounds and experiences.

Canals.ai is an equal opportunity employer. In addition to EEO being the law, it is a policy that is fully consistent with our principles. All qualified applicants will receive consideration for employment without regard to status as a protected veteran or a qualified individual with a disability, or other protected status such as race, religion, color, national origin, sex, sexual orientation, gender identity, genetic information, pregnancy or age.