Lead Security Engineer: Platform Security & Compliance

Canary Technologies Corp; New York (NY); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Unlimited PTO

Holidays + Canary Days

Birthday Holiday

Travel stipend to SF NY Dallas hubs

Hotel experience credit

Preferred Hotels discount

Job summary

Canary Technologies is hiring a Lead Security Engineer to lead our Security team within the Platform organization. This player-coach role will manage a small team of security engineers while owning the security and compliance program end to end, including control frameworks, audits, policies, and risk posture across a platform handling guest data and payments for thousands of hotels worldwide.

You’ll be Canary's primary security voice to customers, partners, and auditors, translating security

Qualifications

• 8+ years in security engineering with leadership experience
• Experience owning compliance programs end to end (SOC 2 Type II, PCI DSS, ISO 27001)
• Hands-on cloud security (AWS) and IAM
• Proven ability to communicate security concepts to technical and non-technical audiences

Responsibilities

• Lead, coach, and grow the Security team, including hiring and priorities
• Own Canary's security and compliance program (SOC 2, PCI DSS, GDPR/CCPA)
• Serve as the primary security point of contact for Canary
• Own vendor and third-party risk management
• Write, maintain, and communicate security policies and standards; run security training
• Set technical direction for security tooling and participate in architecture and threat-model reviews

Skills

Security leadership

SOC 2 / PCI DSS / ISO 27001

AWS cloud security

IAM & application security

Vulnerability management

Vendor risk management

Security policy writing

Strong communication

Job description

Canary Technologies is hiring a Lead Security Engineer to lead our Security team within the Platform organization. This player-coach role will manage a small team of security engineers while owning the security and compliance program end to end, including control frameworks, audits, policies, and risk posture across a platform handling guest data and payments for thousands of hotels worldwide.

You’ll be Canary's primary security voice to customers, partners, and auditors, translating security