{"id":2538018,"url":"https://alion.io/job/titanfile-security-engineer-titanfile-inc-","title":"Security Engineer - TitanFile Inc.","company":{"id":454971,"name":"TitanFile","domain":"titanfile.com","url":"https://alion.io/company/titanfile","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":58000,"max_usd":109000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":13},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"Django","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon ECS","optional":true},{"name":"GDPR","optional":true}],"status":"live","first_seen_at":"2026-10-14T14:53:23Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-21T05:10:36Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Security Engineer\nAbout us\nTitanFile's mission is to democratize secure client communication. This is a challenge worthy of pursuit! The costs and risks associated with complex projects like litigation, processing insurance claims, and conducting regulatory investigations are skyrocketing as the amount of data increases. TitanFile is transforming these processes so they can be done in minutes, not days, by anyone, anywhere. As a result, our customers, who range from financial institutions to law firms and from government agencies to higher education, can service their clients faster with the privacy and security that they expect.What we need:\nTitanFile is looking for a Security Engineer who is personable, persistent, and confident. A person who is passionate about learning new technologies and improving the skills they already have. A person who wants their work to stand for something. A person able to juggle multiple priorities and work with minimal supervision.This person will report to our CEO, who leads our security and compliance program, and will work closely with our Lead Architect and Infrastructure Manager and the engineering team. The role is largely hands-on security engineering combined with governance, risk, and compliance: finding and fixing weaknesses across our cloud platform and application, improving detection and incident response, and turning our security controls into automated, auditable evidence.\nOur customers hold us to a high bar. TitanFile is SOC 2 Type 2 and ISO 27001 certified, and we are pursuing FedRAMP certification to serve the U.S. federal market. The right security engineer will be pragmatic, able to explain risk in plain language, and able to choose controls that protect our customers without slowing the business down. We expect our engineers to work fluently with AI tooling and to apply the same engineering judgment to what it produces as they would to their own work.\nTitanFile offers an incredible opportunity for a Security Engineer to learn and grow, while being part of an awesome growing team in Toronto.\nWhat you'll do:\nRun our vulnerability management program, including scanning, triage, risk rating, and tracking remediation to agreed timeframes across infrastructure, containers, dependencies, and application code\nHelp deliver our FedRAMP 20x certification, including control implementation, automated validation of Key Security Indicators, and readiness for independent assessment\nBuild security controls and evidence collection as code in Terraform and GitLab CI, so compliance is continuous\nStrengthen logging, monitoring, and threat detection across AWS and Azure, and tune alerts so they are actionable\nParticipate in a shared on-call rotation, lead security investigations, and drive post-incident improvements\nReview cloud configuration, identity and access, network design, and encryption against least privilege and secure baselines\nPartner with engineers on secure design reviews, threat modelling, and code review for our Django and Python application\nCoordinate penetration tests and manage findings through to remediation\nMaintain policies, procedures, the risk register, and audit evidence for SOC 2, ISO 27001, and FedRAMP, and support internal and external audits\nAnswer customer security questionnaires and support security reviews with enterprise and government customers\nAssess the security of vendors and subprocessors\nSupport security awareness training and phishing simulations\nUse AI tooling to work faster across analysis, detection engineering, scripting, and documentation, while holding a high bar for accuracy\nSkills:\nPositivity, passion, and creativity for what we do\nExecution-oriented, and energized by a fast-paced startup environment\nHustle, persistence, and love for excellence and innovation\nQualifications:\nBachelor's or Master's degree in Computer Science, Software Engineering, Information Security, or a related field, or equivalent experience\n4 to 7 years of full-time experience in security engineering, cloud security, security operations, or a related role, including at least 2 years of hands-on security work in a cloud environment\nMust be able and willing to lawfully work out of our Toronto, Ontario office on a hybrid schedule\nAble to obtain and maintain Government of Canada security screening at the Secret Status level\nProduction experience securing AWS, including IAM, VPC, KMS, CloudTrail, GuardDuty, and Security Hub\nHands-on vulnerability management experience, including scanning tools, CVSS-based risk rating, and remediation tracking\nExperience with logging, SIEM, or detection engineering, and with incident response\nProficiency in scripting and automation with Python and Bash\nSolid Linux, networking, and cryptography fundamentals, including TLS, DNS, firewalls, and key management\nWorking knowledge of application security and the OWASP Top 10\nExperience with infrastructure as code, ideally Terraform, and CI/CD pipelines, ideally GitLab CI\nExperience supporting a compliance program such as SOC 2, ISO 27001, or FedRAMP, including control implementation and audit evidence\nFluent use of AI assistants to accelerate security analysis and automation, with the judgment to verify, test, and challenge what they produce\nFluent written and verbal communication in English, including explaining risk to non-technical audiences\nNice to have:\nExperience with FedRAMP, FedRAMP 20x, or NIST SP 800-53\nExperience with ITSG-33 or other Government of Canada security requirements\nExperience with ISO 27017, ISO 27018, or privacy laws such as PIPEDA and GDPR\nExperience securing containerized workloads, ideally ECS\nExperience with Django or Python application environments\nSecurity certifications such as CISSP, CCSP, OSCP, CISA, or AWS Certified Security Specialty\nExperience at a SaaS company serving regulated industries\nWhy TitanFile:\nJoin a team of highly effective professionals working to solve two of the biggest challenges in the digital age: communication and privacy\nOpportunity to build a career and grow professionally\nFlexible work hours\nExcellent benefits packages\nNo agencies please.","description_format":"text","description_chars":6130,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Storage & File Sharing"],"lifecycle":[{"event":"open","at":"2026-10-14T14:53:23Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Approved LMIA in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":30,"reasons":["conf:0","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/titanfile-security-engineer-titanfile-inc-","json_url":"https://alion.io/job/titanfile-security-engineer-titanfile-inc-.json","meta":{"generated_at":"2026-10-21T08:36:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12205,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":454971},"rest":"https://alion.io/mcp/rest/get_company?id=454971"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftitanfile-security-engineer-titanfile-inc-"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftitanfile-security-engineer-titanfile-inc-"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftitanfile-security-engineer-titanfile-inc-"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/titanfile-security-engineer-titanfile-inc-\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftitanfile-security-engineer-titanfile-inc-"}]}