Staff Security Engineer

At Shakepay, we’re on a mission to usher in the Bitcoin golden age. We’re reimagining financial services to give every Canadian their fair shake.Our culture is built around doing work that matters, winning as a team, and celebrating success. If you're the kind of person who values growth, shipping fast, and sharing your ideas openly with a group of like-minded people, come and build with us!About Shakepay

Since 2015, we’ve been building the Shakepay app to make buying and earning bitcoin fast, easy, and secure. In 2022, we launched the Shakepay Card, allowing shakers to earn bitcoin rewards when they shop. Today, more than one million Canadians use Shakepay to grow their bitcoin savings and take control of their financial future.

We’re regulated across all Canadian provinces and territories, and backed by renowned venture capitalists with a funding of $44M. We have a passionate, loyal, and growing community, and we’re looking for people who want to help us build something truly special.

About the security team

Security at Shakepay is a company-wide responsibility, supported by a small, high-impact team focused on protecting our customers, systems, and data while enabling product velocity and business growth.

The Security team works closely with Engineering, Risk, Compliance, and Product to design pragmatic security controls, respond to incidents, and continuously improve our security posture in a regulated fintech environment.

Staff Security Engineer

We’re looking for a Staff Security Engineer to help safeguard Shakepay’s infrastructure, products, and customer data.

In this role, you’ll be a hands-on contributor across operational security, incident response, and enterprise security, while also acting as a trusted partner to engineering teams. You’ll help design and implement security solutions that strike the right balance between risk reduction, customer experience, and product growth.

This is not a management role, but it does carry strong expectations around technical leadership, mentorship, and ownership. You’ll report to the Head of Security.

What you’ll be doing

• Design and drive security solutions across product and internal applications
• Conduct threat modeling for existing systems and new product initiatives
• Partner with engineering teams to embed security into development and delivery workflows
• Mentor engineers and share security best practices across the organization
• Build, tune, and automate security alerts, detections, and response workflows
• Participate in and help lead incident response as part of the on-call rotation
• Support governance, compliance, and regulatory efforts (SOC 2, ISO 27001, PCI, etc.)
• Manage relationships with internal stakeholders and external security vendors

Who we’re looking for

• 7+ years of experience building and maintaining secure applications with 3+ of those years in a Security role
• Strong experience in Application Security and best practices
• Ability to build and automate tools and processes to scale capacity across Security and Engineering
• Experience working in cloud environments (AWS preferred)
• Hands-on experience with incident response and on-call rotations
• Strong communication skills and a clear sense of ownership

Bonus points

• Experience working in fintech, crypto, or other regulated environments
• Exposure to product security and influencing product design
• Experience with offensive security or vulnerability research
• Experience or passionate about Artificial Intelligence
• Knowledge of Bitcoin and excitement to learn more
• Comfort using Git/GitHub for collaboration and process management

• Help shape the future of money: Be part of a team that's revolutionizing financial services in Canada, one sat at a time.
• Impact millions: As cryptocurrency continues to gain traction, our potential for growth is massive. You can help us bring Shakepay and Bitcoin to all Canadians.
• Grow your career: We’re growing, and so can you! We have programs in place to encourage continuous learning, growth, and development.
• Ideas, not titles: We want the best ideas to make their way through, no matter where they come from.

• Competitive compensation and stock options: Get rewarded with competitive pay and join our employee stock option plan.
• Health benefits from day 1: Access to comprehensive health and dental coverage, including health and wellness spending accounts.
• Remote-friendly: Work from anywhere in Canada, with optional access to our office spaces in Montreal and Toronto.
• Learning and development: A $2,000 annual budget for courses, certifications, and training to support your career growth.
• Time off: 20 days of vacation per year. And if you use all your vacation, we give you a $1,000 bonus.
• Parental leave: Enjoy a parental leave top up to 100% of your salary for 18 weeks.
• Home office setup: A MacBook, a $1,200 budget for home office improvements, and a monthly stipend for home and internet expenses.
• Salary in bitcoin option: Choose to receive your salary in bitcoin – the soundest money to ever exist.
• Team and company offsites: Whether team-specific or company-wide, these events offer a great chance to connect and collaborate in person.

We understand that potential can be just as valuable as experience. If you're eager to learn, grow, and contribute to the mission but worry that you may not have the “right” experience, we still want you to apply. We encourage applications from everyone, regardless of background and life experience. We’re firm believers that a little bit of slope makes up for a lot of y-intercept.

Please note that while all of our roles are remote, we are a Canadian company and will not be sponsoring visas for this position. You must be eligible to work in Canada to be selected.

Fluency in English is required due to the percentage of English-speaking customers and the nature of our platform, which is available to all Canadians.