{"id":3200758,"url":"https://alion.io/job/marqeta-senior-security-engineer-vulnerability-datasaas-security","title":"Senior Security Engineer - Vulnerability & Data/SaaS Security","company":{"id":4993,"name":"Marqeta","domain":"marqeta.com","url":"https://alion.io/company/marqeta","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":139000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Crowdstrike","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"StackHawk","optional":false}],"status":"live","first_seen_at":"2026-08-27T00:19:18Z","employer_posted_date":"2026-08-27","last_verified_at":"2026-10-25T02:47:19Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":59},"description":"The Senior Security Engineer owns the day-to-day operation, integration, and continuous improvement of Marqeta's vulnerability management, cloud security posture, and data/SaaS security programs. This role sits at the center of the security tooling ecosystem, Tenable, Snyk, StackHawk, CrowdStrike, Sentra, Reco, and ArmorCode, correlating findings across platforms, driving remediation, and translating technical risk into metrics and reporting that inform both engineering teams and executive leadership.\nWe work Flexible First. This role can be performed remotely anywhere within Ontario or British Columbia, Canada. We’d love for you to join us!\nThis position is not for an existing vacancy.\nThe Impact You’ll Have\nVulnerability Management\nOwn the end-to-end vulnerability management lifecycle - triage, prioritization, remediation tracking, and SLA enforcement - across infrastructure, applications, and containers using findings from Tenable.\n\nReview and act on application and code-level vulnerability findings from Snyk (SCA, SAST, container/IaC scanning) and dynamic application security testing results from StackHawk, driving remediation and SLA compliance across relevant teams.\n\nMaintain risk-based prioritization models that weigh severity, exploitability, business criticality, and regulatory impact.\n\nAWS Infrastructure Security & Cloud Security Posture Management (CSPM)\nOwn and mature the CSPM program across AWS infrastructure, monitoring for misconfigurations, drift, and control violations against the Common Controls Framework (CCF).\n\nManage cloud misconfiguration findings identified through CrowdStrike, driving triage, reporting, SLA enforcement, and remediation follow-up across AWS compute and containers.\n\nPartner with cloud/platform engineering to remediate misconfigurations, enforce secure baselines (IAM, networking, storage, encryption), and reduce AWS account-level risk.\n\nData Security & SaaS Security\nOwn the Data Security Posture Management (DSPM) program using Sentra, sensitive data discovery, automated classification, data flow/lineage visibility, and cross-environment replication monitoring across cloud data stores\n\nOperate and mature the SaaS Security Posture Management (SSPM) program using Reco, discovery of sanctioned/shadow SaaS, OAuth and third-party app governance, and SaaS data exposure monitoring.\n\nPartner with data and platform engineering teams to close gaps between security policy and technical enforcement (e.g., classification, least-privilege access, cross-environment data controls).\n\nFindings Aggregation & Remediation Orchestration\nAutomate ticket creation and remediation workflows (e.g., Jira) with proper ownership, SLA tracking, and escalation paths.\n\nDrive risk exception and false-positive review processes in partnership with application, platform, and business owners.\n\nAPI Integration & Automation\nBuild and maintain API integrations between security tools (Tenable, Snyk, StackHawk, CrowdStrike, Sentra, Reco, ArmorCode) and downstream systems (ticketing, SIEM, CMDB, data warehouses).\n\nDevelop automation/scripts to enrich findings with ownership and asset context, reduce manual triage, and keep dashboards current.\n\nMetrics & Executive Reporting\nDefine and maintain KPIs/KRIs across vulnerability management, cloud, SaaS, and data security programs (e.g., MTTD, MTTR, SLA compliance, coverage, risk reduction trends).\n\nBuild and maintain executive dashboards and periodic reporting for leadership and audit stakeholders.\n\nTranslate technical findings into business-risk narratives for non-technical audiences, including compliance mapping (PCI DSS, SOX, SOC 2, ISO 27001).\n\nWho You Are\n5+ years in security engineering, with hands-on ownership of vulnerability management, cloud security, or application/SaaS security programs.\n\nDirect experience with vulnerability scanning platforms (e.g., Tenable) and application security tools (e.g., Snyk, StackHawk).\n\nHands-on experience with CSPM tooling and securing AWS infrastructure Experience with endpoint/cloud workload detection and response platforms (e.g., CrowdStrike Falcon).\n\nExperience with DSPM tooling (Sentra or equivalent) and SSPM tooling (Reco or equivalent).\n\nExperience with security findings aggregation/ASPM platforms (e.g., ArmorCode) and ticketing integration (e.g., Jira).\n\nStrong scripting/API integration skills (Python, REST APIs) to build and maintain tool-to-tool data pipelines across the above stack.\n\nExperience building metrics, KPIs, and executive-level reporting/dashboards from security tooling data.\n\nFamiliarity with compliance frameworks relevant to a regulated environment (PCI DSS, SOX, SOC 2, ISO 27001).\n\nStrong written and verbal communication skills, the ability to translate technical risk into business terms for non-technical and executive stakeholders.\n\nNice-To-Haves\nExperience in a fintech, payments, or other highly regulated industry.\n\nPrior experience owning a vulnerability/risk exception process and SLA governance model.\n\nFamiliarity with SIEM integration and security automation/orchestration (SOAR).\n\nSuccess Metrics for This Role\nReduction in Mean Time to Detect (MTTD) and Mean Time to Remediate (MTTR) across all programs.\n\nSLA compliance rate for critical/high findings.\n\nAWS account/resource coverage under continuous CSPM monitoring, reduction in critical misconfigurations and CrowdStrike-detected threats over time.\n\nCoverage rate of data stores and SaaS applications onboarded into DSPM/SSPM monitoring.\n\nReliability and uptime of tool integrations (Tenable, Snyk, StackHawk, CrowdStrike, Sentra, Reco, ArmorCode).\n\nQuality and consistency of executive reporting (on-time delivery, accuracy, stakeholder satisfaction).\n\nCompensation and Benefits\nMarqeta calibrates pay to a competitive value according to working location. When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this full-time position, reflected in CAD, is: 136,800 - 171,000\nWe also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.\nAlong with monetary compensation, Marqeta currently offers:\nMultiple health insurance options\n\nFlexible vacation time with additional floating holidays\n\nRetirement savings program with company contribution\n\nEquity in a publicly-traded company\n\nMonthly stipend to support our remote work model\n\nAnnual development stipend to support our people growth and development\n\nFamily-forming benefits and up to 20 weeks of Parental Leave\n\nAbout Marqeta\nMarqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. Marqeta is powering the most well known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc). You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.\nMarqeta’s Values\n- Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Earning and keeping their trust guides everything we do.\n- Do What's Right: Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We own our work from start to finish.\n- Simplify and Innovate: We approach challenges with curiosity and take smart risks. Innovation comes from finding better, simpler ways to achieve extraordinary outcomes.\n- Win as a Team: We succeed together by embracing diverse perspectives and pushing each other to raise the bar. We lead with humility and set aside hierarchy to work as a team.\n- Make it Count: We drive forward with focus and agility. With a sense of urgency and purpose, we get the job done, and done right.\nEqual Employment Opportunity, Accommodations and Privacy\nMarqeta is an equal opportunity employer committed to an inclusive workplace that fosters belonging. We do not discriminate based on race, color, religion, sex (including pregnancy, lactation, childbirth, or related medical conditions), veteran status or uniformed service member status, age, national origin or ancestry, citizenship or immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information (including testing or characteristics) or any other characteristic protected by applicable law. We also consider qualified applicants with criminal histories, consistent with legal requirements.\nMarqeta endeavors to make reasonable accommodations for applicants with disabilities. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please submit this form with your specific accommodation request.\nMarqeta cares about your privacy. Personal data that is provided as part of the application and recruitment process is processed in accordance with the Applicant Privacy Notice. Additional information for California residents can be found here.\nTo keep our interview process fair and consistent, we ask that all candidates join video interviews with their camera on.\nNotice on Use of AI in Recruitment\nWe may use artificial intelligence (AI) tools in our recruitment processing consistent with the requirements of applicable laws. For more information, review our AI notice here.","description_format":"text","description_chars":9957,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual bonuses","Equity","Health insurance","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-10-24T08:18:53Z"}],"visa":[],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.82,"p_room":0.55,"age_days":59,"expected_fill_days":42,"reasons":["conf:0","win:tail"],"computed_at":"2026-10-25T02:57:39Z"},"pay":null,"html_url":"https://alion.io/job/marqeta-senior-security-engineer-vulnerability-datasaas-security","json_url":"https://alion.io/job/marqeta-senior-security-engineer-vulnerability-datasaas-security.json","meta":{"generated_at":"2026-10-25T02:57:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4380,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4993},"rest":"https://alion.io/mcp/rest/get_company?id=4993"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmarqeta-senior-security-engineer-vulnerability-datasaas-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmarqeta-senior-security-engineer-vulnerability-datasaas-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmarqeta-senior-security-engineer-vulnerability-datasaas-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/marqeta-senior-security-engineer-vulnerability-datasaas-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmarqeta-senior-security-engineer-vulnerability-datasaas-security"}]}