We’re seeking an experienced Security Analyst to join Shopify’s security organization, focused on our Bug Bounty program operations. Shopify powers millions of merchants worldwide—which means a large and agile attack surface. This role is equal parts security analysis, operational excellence, and high‑quality communication. Bug bounty report triage quality and timeliness (meet SLOs, keep queues healthy, reduce rework). Reproducing and validating reported security issues (prove exploitability, confirm impact, confirm affected assets, confirm fixes via retest/validation). Writing clear, friendly, high‑signal communication to external researchers while representing Shopify well. Using data to quantify performance and program health (queue state, SLOs, throughput, trend reporting). Detect, evaluate, and help address security threats to Shopify and its merchants; develop security controls and protocols; perform security audits; conduct vulnerability assessments and penetration tests; assist in creation and implementation of security solutions; help mitigate compliance and regulatory risks. Use data to investigate emerging risks/trends and translate them into repeatable solutions.



A track record of fast, high‑quality problem solving, with good judgment around impact, severity, and next steps. Comfort operating in externally‑facing workflows with security researchers, representing Shopify professionally and consistently. A data‑informed mindset: use metrics to quantify throughput and quality, track trends, and improve program health over time. A strong sense of accountability: take responsibility for quality of interactions and outcomes, and be ambitious about improving the security and experience delivered. Strong working knowledge of web application security fundamentals (authn/authz, session management, injection, IDOR, SSRF, XSS, CSRF, access control, multi‑tenant risk, etc.). Experience doing vulnerability assessment and/or penetration testing (professionally or in a structured program). Comfortable working in operational queues and juggling multiple in‑flight investigations without losing quality. Excel by seeking professional and personal hypergrowth Work digital‑first for your daily work #

📌 Security Analyst (Winnipeg)
🏢 Shopify
📍 Winnipeg