Staff Security Engineer (AI)

Location: Toronto, Canada; remote workplace type, with a hybrid work model and in-office days for connection and collaboration.

Company

hirify.global is a Canadian financial operating system providing corporate cards, expense management, bill payments, high-yield accounts, and financial software to more than 10,000 Canadian businesses.

What you will do

• Own the technical strategy and standards for application, infrastructure, identity, and AI security, including documenting decisions and explaining risk to leadership.
• Build security primitives into the Python and Django backend, including default-closed authorization and tenancy scoping, and lead adoption across product teams.
• Shape customer identity capabilities covering passwords, passkeys, SSO/SAML, and machine-to-machine authentication.
• Threat-model and review new products and major architectural changes, then design and drive practical fixes through adoption.
• Secure AI agent platforms, MCP gateways, CI/CD, software supply chains, and the move to Kubernetes through policy-as-code, workload isolation, network policy, IAM, and secrets management.
• Lead multi-quarter cross-team initiatives, mentor engineers, communicate architectural risk, and build in-house security tools where appropriate.

Requirements

• 8+ years of experience as a software engineer or security engineer, including building systems and tools in a sufficiently large organization.
• Depth in at least one of application security, identity, or cloud and infrastructure security, with credibility across the others.
• Production coding experience in Python and Django or a similar web stack, including shipping fixes for discovered security issues.
• Hands-on experience designing and building security controls, tooling, or systems at staff-engineer level.
• Experience leading multi-quarter, cross-team technical change through influence and owning complex technical problems from start to finish.
• Clear, direct written and verbal communication with engineers and leaders, including explaining architecture and risk in business terms.
• Practical examples of using AI in engineering or security work.
• Must be willing to ship production fixes, drive adoption across teams, set direction, collaborate with engineering, and use AI-enabled ways of working; profiles focused mainly on purchased tools or compliance management are unsuitable.

Nice to have

• Fintech, payments, or PCI DSS experience.
• Experience building or operating an identity platform at scale.
• Detection engineering or incident response experience.
• Experience securing LLM or agent systems.
• Container and Kubernetes infrastructure security experience.
• Experience bringing a purchased security tool in-house.

Culture & Benefits

• High-autonomy, high-growth role with a customer-focused, entrepreneurial, collaborative, and feedback-oriented culture.
• Decentralized decision-making and an expectation that employees take ownership and raise the bar.
• Competitive compensation, equity options, and benefits.
• Hybrid work model based in Toronto with in-office days for connection and collaboration.
• Catered team lunches Tuesday through Thursday and a dog-friendly office.

Hiring process

• Applications are reviewed on a rolling basis.
• hirify.global uses AI-assisted scheduling and candidate communications, as well as AI-generated interview notes, guides, or summaries; hiring decisions are made by the hiring team.
• Recruiting contact is limited to @hirify.globalfinancial.com addresses, with interviews scheduled through Ashby or hirify.global calendar invites.