141 Soc Engineer jobs in Canada
Security Guard - CCTV Monitoring Room - Casual
Posted today
Job Viewed
Job Description
Job Description
Commissionaires BC is currently looking for an experienced guard to work at the CRA Monitor Room site in Surrey.
Rotation: Saturday & Sunday, 2130 - 0530
Payrate: $23.50/hr
Some of your responsibilities will include:
- Monitor CCTV cameras and fire/alarm systems and reporting any suspicious activity
- Take incoming calls from the public, police and/or employees in a timely manner.
- Maintaining a detailed log after the end of each shift
- Producing ad hoc reports as required by various departments
- Conducting follow-up reviews with clients to ensure client satisfaction
- Any other ad-hoc duties may be assigned to you in your role
Your Must-Haves:
- You hold a valid BC security license
- You must have resided in Canada for the last 5 years due to security clearance requirements
- OFA 1 Certificate or be willing to obtain one
- You have a minimum of 2 years’ experience in a customer service environment
- Previous experience monitoring multiple CCTV cameras simultaneously
- You have excellent verbal and written communication skills
- You have proven time-management and organizational skills
What’s in it for you?
- Opportunity for growth
- Work for a reputable and nationally known company
- A challenging yet rewarding work environment
- Free uniforms
- Competitive salary
You’re a good fit if…
- You pride yourself on your superior customer service skills
- You thrive in a fast-paced environment
- You can think on your feet and problem solve
- You can work alone or as part of a team
Our Story
Commissionaires BC is a Canadian, not-for-profit security/enforcement organization that has been in business since 1927. Our mandate is to give back to those who served and continue to serve in our communities and country.
Commissionaires provides security services for over 200 sites and are located in over 110 communities across the province. Our client base runs from the Federal Government to local municipalities, airports, industrial sectors, and commercial/residential buildings.
Our guards are not only behind the scenes providing security and access control, but front and centre providing valued customer service to the public.
Powered by JazzHR
UfXBSryfxu
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call
Be The First To Know
About the latest Soc engineer Jobs in Canada !
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call
Platform Security Engineering Lead
Posted 9 days ago
Job Viewed
Job Description
Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets globally. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.
If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!
About the Role:
We are seeking a seasoned Platform Security Engineer to lead all aspects of platform security. This is a senior role that blends both technical vision, leadership and a requirement for being hands-on in embedding security and resilience. The role requires excellent communication skills, the ability to drive and deliver a razor sharp path for improving Aquanow’s security posture across platforms and services.
What You’ll Do:
Security Engineering and Architecture
- Development and review of security architecture for all platforms, services, APIs and CI/CD pipelines.
- Lead and execute threat modelling efforts across the Engineering team.
- Lead and perform security architecture reviews and ensure technical decisions are aligned with risks and engineering velocity.
- Partner with Engineering and promote security practices such as hardening standards for applicable components, logging practices etc.
- Work with the broader Security team, Engineering and GRC to tune, scale security tooling, automation and secure processes.
- Design, review, and ensure security controls, including authentication/authorization, secret management, account takeover protection, and application layer threat detection.
- Work closely with developers to code securely from the outset and address issues early during coding and testing phases. Ability to conduct in-depth security reviews of application code.
- Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
- Evangelize security culture through security champion program and technical developer-focused security training.
Strategic
- Define and help execute a comprehensive platform security strategy that aligns with business, technology and product objectives.
- Establish KPIs, OKRs and reporting mechanisms.
- Guide Engineering teams in designing and integrating security aspects into Aquanow’s products, services, and software development lifecycle.
- Help to continue to develop team and security service capabilities across the Security domains in close collaboration with the broader Security and GRC teams.
You’ll Need to Have:
- 10+ years of experience working with AWS cloud architecture and application security with a strong software engineering foundation.
- Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
- Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
- The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Node.js and gRPC.
- Experience with Javascript, Typescript, and Node.js
- Experience with Java and related toolchains
- Experience with manual source code review, and embedding security to code in production environments.
- Experience with deploying application security tools in the CI/CD pipeline
- Relevant certifications (e.g. OSCP, OSWE, GWAPT, CISSP) are a plus.
- Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
- Experience with SAST, SCA, and DAST, with the ability to address real-world challenges in these areas.
- Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
- Ability to work independently and problem solve.
- Strong independent critical thinking with the capability to form, check and challenge opinions through knowledge sharing.
- Skillful in assessing and managing security risks with a pragmatic solution-first approach.
The Interview Process:
- Stage 1: A 45-minute intro with the IT Security Lead
- Stage 2: A 60-minutes deep dive with the VP of Engineering
- Stage 3: A 45-minute video call with the CISO
- Stage 4: Potential for a short follow up video call