Lead Security Engineer (Cloud Security, AppSec, Detection & Response, Privacy) - Remote Canada

Jobgether • Canada

Remote

This Job is No Longer Active This position is no longer accepting applications

AI Summary

Seeking a Lead Security Engineer in Canada to provide technical and operational leadership across cloud security, application security, detection & response, and privacy. This fully remote role involves hands-on engineering and strategic leadership to build resilient, scalable, and secure systems. Key responsibilities include designing security standards, managing compliance programs, and leading incident response. Requires strong cloud security experience (GCP, Kubernetes), programming proficiency (Go, Python, TypeScript), and proven incident response and compliance leadership.

Key Highlights

Technical and operational leadership in cloud security, application security, detection & response, and privacy.

Hands-on engineering combined with strategic security leadership in a fully remote, North America-based environment.

Ownership of SOC 2 and related compliance programs, incident response, and security risk management.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Key Responsibilities

Lead the design, implementation, and continuous improvement of security standards, policies, and monitoring systems, ensuring alignment with secure-by-design and zero-trust principles.

Develop and maintain policy-as-code frameworks to enable automated detection, enforcement, and rapid incident response across cloud environments.

Partner with infrastructure and engineering teams to ensure secure cloud deployments, Kubernetes security, and adherence to internal security controls.

Own and manage SOC 2 and related compliance programs end-to-end, including audits, evidence collection, remediation tracking, and auditor coordination.

Lead incident response activities including on-call support, tabletop exercises, post-incident reviews, and security drills to strengthen organizational readiness.

Manage vulnerability disclosure processes, triage external reports, and ensure timely remediation of security issues.

Oversee security risk management, vendor assessments, customer security questionnaires, and regular reporting of security metrics to leadership.

Technical Skills Required

Cloud Security Infrastructure Security GCP Kubernetes Go Python TypeScript Policy-as-code Incident Response Vulnerability Management Risk Management Vendor Assessments SOC 2

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Benefits & Perks

Fully remote-first work environment across North America

Competitive salary

Comprehensive health, dental, and vision insurance coverage

Flexible vacation policy and work hours

Generous parental leave

High-quality equipment and home office support

Job Description

This role sits at the heart of a modern, engineering-driven security organization focused on building resilient, scalable, and secure systems in a fully remote, North America-based environment. You will act as a technical and operational leader across cloud security, application security, detection & response, and privacy domains. The position combines hands-on engineering with strategic security leadership, ensuring security is embedded across all layers of infrastructure and product development. You will work closely with infrastructure, IT, and engineering teams to define and enforce security standards in cloud-native environments. Beyond technical execution, you will help shape security culture, governance, and compliance maturity across the organization. This is a high-impact role where your work directly strengthens trust, compliance, and resilience at scale.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.