Staff Security Engineer

Join our small, fiery team on a mission to usher in the Bitcoin golden age.

About Shakepay

Shakepay is reimagining financial services to give every Canadian their fair shake, by making it bitcoin-friendly, secure, and rewarding. When Shakepay launched in 2015, it quickly became one of Canada’s fastest-growing financial institutions. Backed by top venture funds having raised $44M+ and trusted by over one million Canadians and counting. People who choose careers at Shakepay are helping shape a future of financial freedom, opportunity, and prosperity for all Canadians.

Staff Security Engineer

Welcome to the crypto world where money is data and therefore data breaches could kill a startup. Have a look at the blockchain graveyard: https://magoo.github.io/Blockchain-Graveyard/.

The tl;dr of your role is having Shakepay never show up there.

As a Staff Security Engineer, you will play a pivotal role in safeguarding Shakepay’s digital assets, infrastructure, and our customer’s data against cyber threats. You will leverage your deep technical expertise in identifying, developing, and implementing security measures, protocols, and strategies collaboratively across various domains. This role will have an outsized impact on Shakepay’s environment and the security of Shakepay and our customers’ assets and data. 

This role will report to the Head of Security.

You will: 

• Work closely with across all of Shakepay to design and drive high impact solutions with the right balance between security, customer experience, and product growth
• Be a subject matter expert and mentor across multiple domains within security and provide impactful output that can be ingested by both operational and engineering focused teams
• Manage relationships, internally and externally, regarding Security processes, services, and vendors. 
• Lead threat modeling discussions for both existing production systems and systems in development
• Own maintaining and improving our Zero Trust environment
• Build, tune, and automate alert responses in code
• Participate in an on-call rotation and serve as the technical lead during incidents
• Participate in governance, compliance, and regulatory audits (SOC2, ISO 27001, PCI, etc.)

Must have: 

• 8+ years of broad Security experience, including but not limited to; Enterprise & Operational Security, Incident Response, Offensive Security, GRC, and Product Security.
• 5+ years experience in a cloud environment (AWS preferred)
• Proficiency in a high-level programming language for building and maintaining our alerting capabilities and to automate Security tasks
• Clear sense ownership and exceptional communication skills to manage expectations, timing, scope, and priority of the work you’re responsible for
• Passion for scaling Security through simplicity and enabling a Security first culture
• Experience in a highly regulated environment (preferably a startup) 

Nice to have:

• Experience with software development and ability to impact product directly
• Knowledge of the technology behind Bitcoin
• Experience with Git (GitHub preferred) for project and process management 
• Cryptography knowledge

Why join? 

• Competitive Salary - Base salary for this role will be $225,000 to $275,000 with additional equity options & benefits to make up the total compensation package. 
• Be part of a groundbreaking journey: you'll live on the frontier of financial innovation. Bitcoin is rewriting the rules, and Shakepay is at the forefront.
• Impact and scale: with only 2% of Canadians on Shakepay, the potential for growth is massive. You can help us bring Shakepay and bitcoin to all Canadians.
• Rewarding benefits: we offer competitive compensation (every shaker owns stock options), benefits (health, dental, paramedical, disability, etc), and generous vacation time.
• Embrace continuous learning: ambitious individuals with an insatiable thirst for knowledge will feel at home. Working at Shakepay means you'll be working in an environment that encourages constant growth and development.
• Get paid in bitcoin: choose to take a percentage of your salary in the hardest, soundest money the world has ever known.
• Work remote: work from anywhere in Canada. If you're in Montreal or Toronto, you can also work from our offices.

We understand that potential can be just as valuable as experience. If you're eager to learn, grow, and contribute to the mission but worry that you may not have the “right” experience, we still want you to apply. We encourage applications from everyone, regardless of background and life experience. We’re firm believers that a little bit of slope makes up for a lot of y-intercept.

Fluency in English is required due to the percentage of English-speaking customers and the nature of our platform, which is available to all Canadians.

Listed in: Crypto Jobs, Remote Crypto Jobs, Web3 Web3 Jobs.