Shape secure product development at gaiia as a Senior Security Engineer, applying threat modelling and application security across remote teams.

This senior, hands-on position protects customer-facing workflows and products through practical security engineering. You will review architecture, authentication, authorization, tenant isolation, and sensitive workflows across TypeScript-based services. The role also includes penetration testing, remediation, bug bounty ownership, and developer partnership.

Key Responsibilities:

- Perform threat modelling and architecture reviews
- Review authentication, authorization, and tenant isolation
- Run internal penetration tests and label security issues
- Partner with developers to implement effective remediations




- Build and maintain a bug bounty program

Requirements:

- At least five years in software or application security
- Strong experience securing contemporary web applications and APIs
- Experience with React, GraphQL, and distributed systems
- Experience with penetration testing, bug bounty, and SAST
- Ability to review architecture and identify practical security risks

Use application security, secure development, and communication skills to strengthen gaiia’s products and customer workflows.

📌 Senior Application Security Engineer (Canada)
🏢 gaiia
📍 Canada