Lead Security Engineer

About the role

Canals is seeking a Lead Security Engineer to own security outcomes across its rapidly growing wholesale‑distribution platform. You will work remotely, shaping security strategy while staying hands‑on with the systems that protect our customers’ data and operations.

Key responsibilities

• Identify highest‑impact security risks and lead end‑to‑end remediation.
• Own application security tooling for code, dependencies, and secrets.
• Conduct threat modeling, risk assessments, and architecture reviews for new and existing services.
• Validate and triage findings from bug bounty programs and penetration tests.
• Lead security monitoring, incident response, and follow‑through on alerts and investigations.

Required profile

• Strong security engineering background with hands‑on experience securing production systems.
• Ability to drive remediation across teams with clear priorities and follow‑up.
• Excellent communication skills and comfort working remotely in a fast‑moving, product‑focused environment.
• Experience integrating security into CI/CD and infrastructure‑as‑code workflows.

Required skills

• Application security tooling
• Threat modeling
• Risk assessment
• Architecture review
• Bug bounty triage
• Penetration testing
• Security monitoring and incident response
• CI/CD integration
• Infrastructure‑as‑code security

What we offer

• Opportunity to impact a fast‑growing SaaS platform serving essential industries.
• Remote‑first, flexible work environment across North and South America.
• Culture that values ownership, transparency, and continuous improvement.
• Equal‑opportunity employer with a focus on inclusive hiring.