Senior Security Engineer (AWS/TypeScript)

Location: Remote (Canada)

Salary: $130,000–$180,000

Company

Gaiia is building an operating system for communications service providers that manages billing, operations, automation, and related telecom workflows.

What you will do

• Protect products and customer-facing workflows through threat modelling, architecture reviews, secure-development standards, penetration testing, remediation support, and bug bounty management.
• Strengthen AWS and other critical cloud environments, including IAM, least privilege, production access, logging, monitoring, infrastructure-as-code, deployment pipelines, data stores, networks, backups, and encryption.
• Own vulnerability intake, prioritization, remediation SLAs, root-cause tracking, security alert triage, incident investigations, response plans, exercises, and escalation procedures.
• Support SOC 2, GDPR, and PCI programs, audits, external assessments, vendor reviews, security questionnaires, and security commitments in sales and legal discussions.
• Build security enablement through training, scalable guardrails, security champions, roadmap planning, leadership reporting, and long-term security team development.

Requirements

• At least five years of experience in Software Engineering, Application Security, Infrastructure Security, or a closely related technical role.
• Strong experience securing modern web applications, APIs, distributed systems, and cloud infrastructure.
• Strong AWS experience and strong experience with the JavaScript/TypeScript ecosystem.
• Experience with React, microservices, serverless architectures, infrastructure-as-code, CI/CD pipelines, and production systems.
• Strong understanding of authentication, authorization, secrets management, IAM, logging, monitoring, and secure SDLC practices.
• Experience with penetration testing, bug bounty programs, SAST, dependency scanning, and related security practices.
• Strong judgment and pragmatism in critical business decisions; a rigorous, calm, and level-headed approach to incidents, ambiguity, and high-stakes situations.
• Strong communication skills, including the ability to coach, influence, and enable teams without unnecessary friction.
• Ability to prioritize security work based on business impact, customer risk, operational urgency, and engineering feasibility, and to review architecture and implement practical mitigations with engineering teams.

Nice to have

• Experience with GraphQL.
• Knowledge of telecom concepts.
• Experience working on a System of Record.
• Experience with compliance programs.
• Experience supporting sales and legal conversations involving security commitments.
• Experience building security programs in a high-growth SaaS company.

Culture & Benefits

• 100% remote environment with flexible working hours.
• Flexible 25 days of vacation.
• Stock Options Plan.
• Group insurance, telemedicine, and Life and Health Spending Accounts.
• Group Retirement Savings Plan (RRSP).
• Inclusive, accessible workplace with accommodations available during the application process.