Senior Security Engineer - Drive Security Strategy (Remote)

Canals; Colombia; Híbrido; COP 90.000.000 - 150.000.000; Jornada completa

Descripción de la vacante

Canals is seeking a senior security engineer to own security outcomes across our product and infrastructure. You will drive remediation, own tooling for code security and secrets, and lead threat modeling and architecture reviews for services we build and scale.

You will triage bug bounty and pentest findings, contribute to security monitoring, and coordinate incident response. Remote-first, with teams across North and South America, you’ll influence security decisions in a fast-moving startup

Formación

• Strong security engineering background with hands-on experience securing production systems.
• Ability to drive remediation across teams with clear priorities and follow-up.
• Ownership mindset with delivering high-quality results.
• Excellent communication and ability to work remotely in a fast-moving product environment.
• Experience integrating security into CI/CD and infrastructure-as-code workflows.
• Prior startup or small team experience is a plus.

Responsabilidades

• Identify the highest-impact security risks and lead remediation end-to-end.
• Own application security tooling for code, dependencies, and secrets.
• Lead threat modeling, risk assessments, and architecture reviews for new and existing services.
• Validate and triage findings from bug bounties and pentests.
• Lead security monitoring and incident response: alerts, investigations, and follow-through.

Conocimientos

Security engineering

Remediation leadership

CI/CD security

Infrastructure as code

Threat modeling

Incident response

Herramientas

CI/CD tooling

Descripción del empleo

Canals is seeking a senior security engineer to own security outcomes across our product and infrastructure. You will drive remediation, own tooling for code security and secrets, and lead threat modeling and architecture reviews for services we build and scale.

You will triage bug bounty and pentest findings, contribute to security monitoring, and coordinate incident response. Remote-first, with teams across North and South America, you’ll influence security decisions in a fast-moving startup