Guard the tech behind live events

If you’ve ever been frustrated watching excellent ideas get stuck in bureaucracy, you’ll love it here because we ship! Most engineers spend their careers building things users tolerate. We're building things they depend on- the kiosk someone walks up to at a conference of 5,000 people, the dashboard an organizer is staring at backstage, the badge that prints the moment someone checks in. When our software works, nobody notices. When it doesn't, the whole event feels it. PheedLoop powers live events around the world. From intimate campus summits to major trade shows, we give organizers the tools to run smarter, more connected events - check-in kiosks, badge printing, mobile apps, and engagement tools that work together as a single ecosystem.

We're not building software people use by obligation. Event organizers choose PheedLoop because it works when it matters most; and that bar pushes us to build better every day.

Run internal red team engagements against PheedLoop's platform, infrastructure, and people, then turn every finding into a fix that actually ships. Plan and execute realistic attack simulations end-to-end, from reconnaissance to post-exploitation. Harden the software supply chain. Build the controls, tooling, and processes that keep us safe from poisoned libraries, and malicious tools. Audit dependencies, lock down CI/CD, and kill credential sprawl wherever it hides.

Set the bar for endpoint hardening, extension hygiene,



secret management, and least-privilege access across every machine that touches production.

Compound a real security culture by inoculation. Partner closely with Engineering, SRE, and leadership to translate findings into roadmap items, threat models into architecture decisions, and security wins into things the business can feel.

3+ years in offensive security, red teaming, penetration testing, or a closely adjacent role, with real hands-on engagements you can speak to in depth.

web app and API security

(OWASP Top 10 inside and out), authentication and authorization flaws, network attacks, and post-exploitation techniques.

Working knowledge of supply chain attack patterns — package compromise, dependency confusion, typosquatting, malicious IDE extensions — and the controls that actually catch them.

Python / Django, React, and AWS . You don't need to be a senior software engineer, but you can read application code, understand a deployment pipeline, and reason about cloud misconfigurations.

Solid scripting skills in

Python, Bash , or similar. 100% employer-paid health coverage

Office directly on the TTC subway- one of Toronto's easiest commutes

Clear path to technical leadership as the team scales

High-ownership culture- small team, immediate impact, no layers between you and the work

It'll be the morning of a 15,000-person conference when everything works because you built it.

📌 Senior Technology Security Engineer (Toronto)
🏢 PheedLoop
📍 Toronto