Lead Security Engineer — Platform & Compliance

Canary Technologies Corp; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Unlimited PTO

Holidays + Canary Days

Birthday Holiday

Travel stipend

Hotel stay credit

Hotel discounts

Learning stipend

Referral bonus

Job summary

Canary Technologies is hiring a Lead Security Engineer to lead our Security team within the Platform organization. This player-coach role will manage and grow a small security team while owning Canary's security and compliance program end to end, including control framework, audits, policies, and risk posture across a platform that handles guest data and payments for thousands of hotels worldwide.

You'll be Canary's primary security voice to customers, partners, and auditors, translating our

Qualifications

• 8+ years in security engineering and 2+ years in a leadership role.
• Proven experience owning compliance programs end-to-end (SOC 2 Type II, PCI DSS, ISO 27001).
• Exceptional written and verbal communication.
• Hands-on cloud security (AWS), IAM, app security, and vulnerability management.
• Experience with vendor risk management and security terms in contracts.
• Track record building pragmatic security programs at a growth SaaS company.
• Nice-to-have: hospitality/payments sector experience; CISSP/CISM/CISA.

Responsibilities

• Lead, coach, and grow the Security team with hiring and priorities.
• Own Canary's security and compliance program (SOC 2, PCI DSS, GDPR/CCPA).
• Serve as the primary security point of contact for Canary.
• Own vendor and third-party risk management.
• Write and communicate security policies; run awareness and training.
• Set technical direction for security tooling; contribute to threat-model reviews.

Skills

Security engineering

Team leadership

Compliance programs

Security architecture

Communication

Tools

AWS

IAM

Vulnerability management

Job description

Canary Technologies is hiring a Lead Security Engineer to lead our Security team within the Platform organization. This player-coach role will manage and grow a small security team while owning Canary's security and compliance program end to end, including control framework, audits, policies, and risk posture across a platform that handles guest data and payments for thousands of hotels worldwide.

You'll be Canary's primary security voice to customers, partners, and auditors, translating our