{"id":3342624,"url":"https://alion.io/job/open-positions-senior-security-engineer","title":"Senior Security Engineer","company":{"id":19876,"name":"Open Positions","domain":"gaiia.com","url":"https://alion.io/company/open-positions","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":88,"open_postings":10,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":{"min":130000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"JavaScript","optional":false},{"name":"Least Privilege","optional":false},{"name":"React.js","optional":false},{"name":"Snowflake","optional":false},{"name":"SOC 2","optional":false},{"name":"TypeScript","optional":false},{"name":"GraphQL","optional":true}],"status":"live","first_seen_at":"2026-10-27T15:11:53Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T14:40:24Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About gaiia\nAt gaiia, we're building the leading platform for Communications Service Providers (CSPs) that truly care about their customers. Our core product is an operating system (OS) for telcos that manages billing, operations, automation and everything in between.\nWe're passionate about taking care of our people, and it's not just lip service. We want you to focus on your job while we care for everything else. We offer competitive pay and benefits, attractive stock options, unparalleled transparency, and a 100% remote environment. We're excited to have you join us for your next career adventure!\nRole & Team\nWe're looking to hire a Senior Security Engineer with excellent technical skills, strong security judgment, and effective communication skills.\nThis is a hands-on role for someone who can operate as both a security generalist and a strong full-stack engineer. You will help protect gaiia’s products, infrastructure, customers, and teams by combining deep technical execution with pragmatic security leadership.\nYou will report to the Platform Lead and work closely with the Platform Lead and the CTO as thought partners. Together, you will help identify, prioritize, and execute the most important security work based on business criticality, customer impact, risk, and operational urgency.\nThis role is ideal for someone who can move fluidly between code, cloud infrastructure, product architecture, incident response, compliance, and team enablement, while staying grounded in practical business outcomes.\nWhat is your team working on?\nTechnically speaking, you will work in a serverless ecosystem of microservices deployed on a cloud infrastructure. Gaiia is all-in on Typescript, with frontend, backend and infrastructure-as-code all leveraging Typescript.\nAs part of the security function, you will have the chance to work across five major axes:\nProduct and application security\nProtect gaiia’s products and customer-facing workflows by building security into design, development, testing, and remediation.\nPerform threat modelling and architecture reviews.\nReview authentication, authorization, tenant isolation and sensitive workflows.\nReview our secure-development standards and lightweight security reviews.\nRun internal penetration tests and work with developers on labelling issues and implementing remediations.\nBuild and maintain a bug bounty program.\nCloud and infrastructure security\nStrengthen the security of our cloud platforms, production environments, access model, deployment pipelines, and critical vendor configurations.\nReview AWS, Snowflake, GitHub and other critical vendors’ configurations.\nImprove IAM, least privilege and production access for employees.\nImprove IAM, least privilege and production access for Lambdas and other cloud resources.\nReview logging, detection and cloud-security monitoring.\nReview infrastructure-as-code and deployment pipelines.\nHarden data stores, networks, backups and encryption controls.\nVulnerability and incident management\nCreate a clear operating model for finding, prioritizing, investigating, remediating, and learning from security issues and incidents.\nOwn vulnerability intake, prioritization and remediation SLAs.\nTrack root causes and ensure corrective actions are completed and satisfactory.\nTriage security alerts and coordinate investigations.\nMaintain incident-response plans and conduct exercises.\nDocument escalation and communication procedures.\nGovernance, Risk and Compliance (GRC)\nMaintain the policies, controls, evidence, and customer-facing security posture needed to meet regulatory, audit, sales, and legal expectations.\nParticipate in the review and operation of current programs, including SOC 2, GDPR, and PCI.\nCoordinate auditors and external assessments.\nHelp the Sales team with security questionnaires that they cannot answer confidently.\nSupport the CTO in sales and legal negotiations involving security commitments.\nReview vendors and subprocessors’ security controls.\nSecurity enablement\nScale security across the company through training, guardrails, champions, roadmap planning, and leadership visibility.\nBuild and enforce training for engineering and employees.\nBuild reusable guardrails that scale without manually approving everything.\nEstablish security champions across Engineering to aid in security initiatives.\nMaintain a prioritized security roadmap.\nReport material risks and progress to leadership.\nParticipate in the long-term plan to build the security team.\nQualifications\nTechnical\nAt least five (5) years of experience in Software Engineering, Application Security, Infrastructure Security, or a closely related technical role.\nStrong experience securing modern web applications, APIs, distributed systems, and cloud infrastructure.\nStrong experience with AWS.\nStrong experience with the JavaScript / TypeScript ecosystem.\nExperience with React.\nExperience working with microservices, serverless architectures, infrastructure-as-code, CI/CD pipelines, and production systems.\nStrong understanding of authentication, authorization, secrets management, IAM, logging, monitoring, and secure SDLC practices.\nExperience with penetration testing, bug bounty programs, SAST, dependency scanning, etc.\nPersonal\nStellar judgement and pragmatism when making and implementing critical business decisions.\nRigorous, calm, and level-headed approach to incidents, ambiguity, and high-stakes situations.\nImpressive communication skills, with the ability to coach, influence, and enable teams without slowing them down unnecessarily.\nAbility to prioritize security work based on business impact, customer risk, operational urgency, and engineering feasibility.\nExperience reviewing product architecture, identifying practical security risks, and partnering with engineering teams to implement effective mitigations.\nNice-to-haves\nYou have experience with GraphQL.\nYou have knowledge of telecom concepts.\nYou have experience working on a System of Record.\nYou have experience with compliance programs.\nYou have experience supporting sales and legal conversations involving security commitments.\nYou have experience building ****security programs in a high-growth SaaS company.\nSalary\nAt gaiia, we have a transparent salary philosophy and a robust evaluation and compensation framework. It translates to a fair and impartial model where salaries are published internally, healthy discussions around compensation and performance can exist, and taboos are removed.\nThe salary range for this role is $130,000-$180,000.\nBenefits\nFlexible 25 days vacation.\nStock Options Plan.\nGroup Insurance.\nTelemedicine.\nLife and Health Spending Accounts.\nGroup Retirement Savings Plan (RRSP).\nFlexible working hours & all-remote work.\nWe are an equal-opportunity employer committed to inclusivity and diversity. Our workplace is fully remote and boasts accessible technologies, ensuring all team members can thrive. Should you require accommodations due to a disability during the application process, please contact us at 581-996-9639 or  as per the Accessible Canada Act and human rights legislation. We're here to support you every step of the way. \n#LI-DNI","description_format":"text","description_chars":7179,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Retirement plans","Stock options"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Billing & Subscription Management"],"lifecycle":[{"event":"open","at":"2026-10-27T16:05:33Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":35,"reasons":["conf:3","stale_co","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/open-positions-senior-security-engineer","json_url":"https://alion.io/job/open-positions-senior-security-engineer.json","meta":{"generated_at":"2026-10-30T16:06:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4107,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19876},"rest":"https://alion.io/mcp/rest/get_company?id=19876"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopen-positions-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopen-positions-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopen-positions-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/open-positions-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopen-positions-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3342624}},{"tool":"search_jobs","arguments":{"company":"gaiia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3342624},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}