Senior Security Engineer (Fintech)

Location: Toronto, Canada; Onsite

Company

hirify.global is a Series A fintech building multi-currency accounts, global transfers, corporate cards, and AI finance tools for Canadian businesses.

What you will do

• Define and drive the security roadmap, prioritizing business-critical risks.
• Partner with engineering and product on secure design and code reviews, especially for money movement features.
• Protect identities, accounts, applications, APIs, partner integrations, devices, and internal systems.
• Strengthen cloud prevention, detection, and response; lead incidents from triage through post-mortem.
• Automate security across the development lifecycle and infrastructure, including vulnerability management and penetration testing.
• Drive data security, third-party risk management, AI safety guardrails, policies, bank and partner reviews, and SOC 2 and PCI DSS readiness.

Requirements

• 7+ years of experience in security engineering, application security, or software engineering with a strong security focus.
• Experience building or significantly maturing security at a startup or high-growth company.
• Strong backend coding skills; Java or Kotlin preferred, with a bias for shipping fixes.
• Depth in at least two of application security, security operations, and governance, risk and compliance, with comfort across all three.
• Strong understanding of modern authentication and identity, including attacker techniques.
• Hands-on cloud security experience, ideally with AWS.
• Experience spanning product and corporate security, including code reviews, devices, and identity providers.
• Experience leading incident response in a production environment.
• Pragmatic, risk-based judgment and clear communication with engineers, leadership, and partners.

Nice to have

• Fintech, payments, or other regulated-industry experience.
• Experience with fraud, anti-abuse, KYC/KYB systems, SOC 2 or PCI DSS audits, bank partner security reviews, detection engineering, or infrastructure as code.
• Familiarity with security risks of AI and LLM-based tools.
• OSCP, OSWE, or GIAC certification.

Culture & Benefits

• Culture built around ownership, high standards, challenging assumptions, teamwork, fast iteration, honest feedback, and data-driven decisions.
• Equity in a Series A company.
• Health, dental, and vision benefits from the first day.
• Four weeks of vacation, unlimited sick and personal days, and paid parental leave top-up.
• Weekly lunches and paid dinners when work runs late.

Hiring process

• hirify.global uses AI tools in the process, while people make every hiring decision.
• Applications are contacted only from an @hirify.global.ca email or Ashby; no payment or banking details will be requested.
• Accommodations are available at any stage on request.