Description:

The position is for a Senior Software Security Engineer, working remotely from Canada.
The primary responsibility is to ensure the security of the AI workspace platform, North, by reviewing and developing security features that protect sensitive data and applications.
The role involves conducting security architecture reviews and threat modeling to ensure the platform's security.
Responsibilities include developing core security features such as OIDC/OAuth flows and session management for secure AI agent interactions.
The engineer will implement secure coding practices for handling sensitive data, including JWT validation and encryption.
Advising on authentication mechanisms, token management, and authorization checks to maintain data integrity is also part of the role.
The engineer will design and execute simulated attacks to evaluate the resilience of systems and applications.
Collaboration with cross-functional teams to communicate security best practices and influence decision-making is essential.

Requirements:

Candidates must have 5+ years of experience in Product Security, focusing on security architecture and application security testing.
Hands-on experience with Python or Go programming languages is required.
In-depth knowledge of OIDC specifications, OAuth 2.0, JWT, and related security protocols is necessary.
Familiarity with application security principles, vulnerabilities, and offensive security techniques like red teaming is expected.
A strong understanding of secure engineering practices, session management, and multi-factor authentication is essential.
The ability to work in an ambiguous environment and make informed security decisions with limited data is required.

The company offers an open, inclusive work culture and a collaborative environment.
Employees will work on the forefront of AI research with a team of experts.
A weekly lunch stipend and in-office meals and snacks are provided.
Comprehensive health and dental benefits are included, along with a separate mental health budget.
There is a 100% Parental Leave top-up for 6 months for employees in Canada, the US, and the UK.
Personal enrichment benefits for arts, culture, fitness, and workspace improvement are available.
The position is remote-flexible, with offices in Toronto, New York, San Francisco, and London, plus a co-working stipend.
Employees receive 6 weeks of vacation annually.