Lead Security Engineer

About the Role:

• Lead, coach, and grow the Security team, including hiring, performance, priorities, and career development.
• Own Canary's security and compliance program (SOC 2, PCI DSS, GDPR/CCPA, and other frameworks).
• Serve as primary security point of contact for Canary, including vendor risk management.

What You'll Do:

• Write, maintain, and communicate security policies and standards company-wide.
• Set technical direction for security tooling and stay hands-on in architecture and threat-model reviews.
• Run security awareness and training across the organization.

What We're Looking For:

• 8+ years in security engineering, including 2+ years leading a team as a manager or tech lead.
• Proven experience owning compliance programs end to end (SOC 2 Type II, PCI DSS, ISO 27001, or similar).
• Hands-on technical foundation in cloud security (AWS), identity and access management, application security, and vulnerability management.

Perks & Benefits:

• Unlimited PTO, holidays, Canary Days, and birthday holiday.
• Travel stipend, hotel experience credit, and partner hotel discounts.
• Self Improvement Club, professional development stipend, and referral program.