Remote Senior Product Security Engineer (Canada)

Lime; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Lime is seeking a Senior Security Engineer to join our Product Security team. You will partner with engineering to perform security reviews, threat modeling, and risk assessments for products and APIs, and build scalable security tooling across the development lifecycle.

You will contribute to security architecture reviews, incident response, and proactive threat mitigation while working in a remote-first environment.

Qualifications

• 5+ years in product security, application security, or security engineering.
• Hands-on technical contribution across the software development lifecycle.
• Experience with threat modeling, vulnerability management, and secure development practices.

Responsibilities

• Partner with engineering to perform security reviews, threat modeling, and risk assessments for features, APIs, mobile apps, and backend services.
• Develop and maintain security tooling and pipelines for vulnerability detection, dependency scanning, and testing across SDLC.
• Contribute to security architecture reviews and evaluate authentication/authorization designs and API security.
• Support BugCrowd bug bounty program triage, coordination, and validation.
• Participate in on-call rotations, respond to incidents, and drive post-incident improvements.

Skills

Application security

Threat modeling

Vulnerability management

Security monitoring

Detection engineering

Security architecture

Incident response

Communication

Team collaboration

Secure SDLC

Education

Bachelor's degree in CS or related field

Tools

SAST

DAST

SCA

Secrets management

AWS/GCP

OAuth/OIDC/RBAC

Cloud security tooling

SIEM

Job description

Lime is seeking a Senior Security Engineer to join our Product Security team. You will partner with engineering to perform security reviews, threat modeling, and risk assessments for products and APIs, and build scalable security tooling across the development lifecycle.

You will contribute to security architecture reviews, incident response, and proactive threat mitigation while working in a remote-first environment.