Staff Security Engineer
Shakepay is a Canadian financial services company that lets Canadians buy, sell, send, and hold bitcoin and ethereum. It also offers bitcoin rewards, direct deposit, cashback, and wallet transfers.
Maintainer signals as of 9/25/2026
Funding history
About Shakepay
Shakepay provides a Canadian crypto platform for buying and selling bitcoin and ethereum, sending money, and moving bitcoin to private wallets or cash to banks. Its offerings include recurring bitcoin buys, bitcoin rewards for shaking and shopping, direct deposit, referrals, business services, and private-client services. The company states that it is a CIRO member, registered as an Investment Dealer across Canadian provinces and territories, and licensed by FINTRAC as a Money Service Business.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will act as a hands-on technical contributor across application, product, infrastructure, enterprise, and observability security. You will design scalable security solutions, embed security in engineering workflows, automate detection and response processes with AI, participate in on-call incident response, and support compliance efforts.
Requirements
- 8+ years of experience in security engineering, software engineering, or a related technical discipline, with meaningful security experience
- Strong technical depth in one or more security domains and the ability to operate across associated domains
- Advanced hands-on experience using AI tools, agents, and automation for security engineering
- Experience working in cloud environments; AWS preferred
- Hands-on experience with incident response and on-call rotations
- Strong communication skills, technical judgment, and ownership
- Fluency in English
Responsibilities
- Design and drive security solutions across product, internal applications, infrastructure, enterprise systems, and observability
- Conduct threat modeling for existing systems and new product initiatives
- Partner with engineering teams to embed security into development and delivery workflows
- Build, tune, and automate security alerts, detections, observability, and response workflows using AI and agents
- Participate in and help lead incident response as part of the on-call rotation
- Support governance, compliance, and regulatory efforts including SOC 2, ISO 27001, and PCI
- Mentor engineers and share security best practices
- Shape security priorities and technical direction while managing relationships with stakeholders and security vendors
Benefits
- Stock options
- Generous AI token budget
- Health and dental coverage, including health and wellness spending accounts
- Remote work anywhere in Canada with optional office access in Montreal and Toronto
- 20 days of vacation per year
- CAD 1,000 bonus for using all vacation
- Parental leave top-up to 100% of salary for 18 weeks
- Quarterly team-specific or company-wide offsites
