At gaiia , we're building the leading platform for Communications Service Providers (CSPs) that truly care about their customers. Our core product is an operating system (OS) for telcos that manages billing, operations, automation and everything in between. We're passionate about taking care of our people, and it's not just lip service. We want you to focus on your job while we care for everything else.

We offer competitive pay and benefits, attractive stock options, unparalleled transparency, and a 100% remote environment. We're looking to hire a Senior Security Engineer with excellent technical skills, strong security judgment, and effective communication skills. This is a hands-on role for someone who can operate as both a security generalist and a strong full-stack engineer.

You will help protect gaiia’s products, infrastructure, customers, and teams by combining deep technical execution with pragmatic security leadership. Together, you will help identify, prioritize, and execute the most important security work based on business criticality, customer impact, risk, and operational urgency. Gaiia is all-in on Typescript, with frontend, backend and infrastructure-as-code all leveraging Typescript.

As part of the security function, you will have the chance to work across five major axes: Product and application security Protect gaiia’s products and customer-facing workflows by building security into design, development, testing, and remediation. Review authentication, authorization, tenant isolation and sensitive workflows. Review our secure-development standards and lightweight security reviews.

Run internal penetration tests and work with developers on labelling issues and implementing remediations. Cloud and infrastructure security Strengthen the security of our cloud platforms,



production environments, access model, deployment pipelines, and critical vendor configurations. Review AWS, Snowflake, GitHub and other critical vendors’ configurations.

Review logging, detection and cloud-security monitoring. Review infrastructure-as-code and deployment pipelines. Harden data stores, networks, backups and encryption controls. Create a explicit operating model for finding, prioritizing, investigating, remediating, and learning from security issues and incidents.

Triage security alerts and coordinate investigations. Governance, Risk and Compliance (GRC) Maintain the policies, controls, evidence, and customer-facing security posture needed to meet regulatory, audit, sales, and legal expectations. Help the Sales team with security questionnaires that they cannot answer confidently.

Support the CTO in sales and legal negotiations involving security commitments. Review vendors and subprocessors’ security controls. Security enablement Scale security across the company through training, guardrails, champions, roadmap planning, and leadership visibility.

Build and enforce training for engineering and employees. Establish security champions across Engineering to aid in security initiatives. Maintain a prioritized security roadmap. Report material risks and progress to leadership.

Participate in the long-term plan to build the security team.

Technical

At least five (5)



years of experience in Software Engineering, Application Security, Infrastructure Security, or a closely related technical role. Strong experience securing modern web applications, APIs, distributed systems, and cloud infrastructure. Strong experience with AWS.

Experience with React.

Experience working with microservices, serverless architectures, infrastructure-as-code, CI/CD pipelines, and production systems. Strong understanding of authentication, authorization, secrets management, IAM, logging, monitoring, and secure SDLC practices.

Experience with penetration testing, bug bounty programs, SAST, dependency scanning, etc.

Personal

Ability to prioritize security work based on business impact, customer risk, operational urgency, and engineering feasibility.

Experience reviewing product architecture, identifying practical security risks, and partnering with engineering teams to implement effective mitigations. You have experience supporting sales and legal conversations involving security commitments. You have experience building ****security programs in a high-growth SaaS company.

It translates to a fair and impartial model where salaries are published internally, healthy discussions around compensation and performance can exist, and taboos are removed. Flexible 25 days vacation. Life and Health Spending Accounts.

Group Retirement Savings

Plan (RRSP). Flexible working hours & all-remote work. We are an equal-opportunity employer committed to inclusivity and diversity. Our workplace is fully remote and boasts accessible technologies, ensuring all team members can thrive. Should you require accommodations due to a disability during the application process, please contact us at (phone hidden) or people@gaiia.

📌 Senior Security Engineering (Winnipeg)
🏢 gaiia
📍 Winnipeg