Why Snaplii?

Snaplii is a profitable wallet and payments platform for people and their AI agents:

400,000+ users ,

about $150M in annual payment volume , and

500+ brand partners

including Costco, Walmart, Amazon and Uber.

Muse has taken off, and Snaplii is already live on it, with

about 2,000 AI agents

running on Snaplii. AI helps people decide what to buy. Snaplii completes the payment, safely.

The Opportunity

We’re hiring a Staff-level individual contributor with robust software engineering skills, deep AWS and Kubernetes security experience, and practical incident response experience. You will write and ship production code, lead security improvements across our applications and cloud environments, and coordinate the technical response to security incidents.

You will trace risks across code, identities, infrastructure and data, turn findings into engineering changes, and verify that those changes work in production. Recent development experience is essential: you should be comfortable working directly in our Java and Spring Boot services, writing automated tests, and taking changes through review, rollout and recovery.

At Staff level, your impact extends across teams. You will help engineering and business leaders prioritize risk, establish clear ownership, and build controls that other engineers can maintain.

What You’ll Own

Production security engineering — design, implement and review security-sensitive backend changes. Strengthen authentication, authorization, API boundaries, data access and business logic, with regression tests, observable behavior and safe rollout and rollback plans.

AWS and Kubernetes security — map assets, identities and trust relationships across AWS accounts and EKS clusters.



Improve IAM and Kubernetes RBAC, workload identities, network boundaries, secrets handling and privileged access.

Incident response and trusted recovery — lead technical investigation and coordinate containment, evidence preservation, credential revocation and rotation, persistence checks, remediation and recovery. Distinguish confirmed facts from hypotheses, document gaps and define recovery acceptance criteria.

Detection and investigation — improve the coverage and usefulness of CloudTrail, EKS audit, S3, database and host logs. Build and tune detections for credential misuse, unusual data access, privilege escalation and suspicious execution, with clear escalation paths.

Credentials and software delivery — reduce long‑lifes and shared credentials; strengthen GitHub, CI/CD, artifact and GitOps access. Build security checks into infrastructure as code, code review, dependency management and secret scanning, and verify remediation beyond individual alerts.

Security automation — write maintainable tools and services for asset and identity inventory, permission analysis, evidence collection, credential lifecycle management and control validation. Apply normal engineering standards to security tooling: tests, reviews, documentation and controlled releases.

Product and payment security — partner with payments,



risk and application teams on transaction authorization, sensitive operations, partner integrations and abuse prevention. Secure AI agent credentials, spending limits and transaction‑level permissions.

Risk ownership and verification — maintain a prioritized security roadmap with named engineering owners, dependencies and acceptance criteria. Validate fixes, track unresolved risks and help leadership make explicit decisions about exceptions.

How You’ll Work

You will work with engineering leadership, application owners and the teams responsible for platform operations. You will lead security design, incident investigation and security acceptance criteria while contributing code and infrastructure changes directly. Application and platform owners remain responsible for their services and share responsibility for implementing and operating improvements.

You will help define authorized containment actions, escalation procedures and an on‑call arrangement with agreed coverage and backup support. You will also coordinate specialist support when needed. Routine availability, capacity management and backup operations are shared with service owners; your role includes validating the security and recovery controls around them.

What We’re Looking For

Software engineering, cloud security and incident response are all core requirements. We look for evidence of work you personally delivered and the judgment you used to make it safe and effective.

Strong, current software engineering — substantial backend or platform development experience, including recent production coding. You can independently modify Java and Spring Boot services, reason about APIs, MySQL, Redis and asynchrono

📌 Staff Security Engineer (Winnipeg)
🏢 Snaplii
📍 Winnipeg