Staff Security Engineer (Production Security & Incident Response)

snaplii • Canada

Remote Visa Sponsorship

Apply Now

AI Summary

Lead production security engineering, incident response, and AWS/Kubernetes security at Snaplii, a payments platform with 400K+ users and $150M annual volume. Own risk reduction, secure code changes, and cross-team security improvements while mentoring engineers and defining recovery procedures. Requires deep Java/Spring Boot, AWS, Kubernetes, and incident response expertise.

Key Highlights

Staff-level ownership of production security, incident response, and AWS/Kubernetes security

Direct code contributions in Java/Spring Boot, security automation, and cloud infrastructure

Cross-team leadership in risk prioritization, controls design, and security roadmap execution

Searching for Cyber Security roles that provide visa sponsorship? Connect with international employers through Cyber Security Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

Key Responsibilities

Design, implement, and review security-sensitive backend changes in Java/Spring Boot services, including authentication, authorization, and business logic hardening

Lead AWS and Kubernetes security improvements, mapping assets, identities, and trust relationships across accounts and EKS clusters, with a focus on IAM, RBAC, network boundaries, and secrets management

Own incident response from investigation to recovery, including evidence preservation, credential revocation, remediation, and verification of containment and restoration procedures

Enhance detection and investigation capabilities by improving CloudTrail, EKS audit logs, and database/log coverage, with clear escalation paths for credential misuse, privilege escalation, and suspicious activity

Reduce long-lived and shared credentials, strengthen CI/CD, GitHub, and artifact security, and integrate security checks into infrastructure as code, code review, and dependency management

Build security automation tools for asset inventory, permission analysis, credential lifecycle management, and control validation using Python/Go

Collaborate with payments, risk, and application teams to secure AI agent credentials, transaction authorization, and partner integrations while preventing abuse

Maintain a prioritized security roadmap with named owners, dependencies, and acceptance criteria, validating fixes and tracking unresolved risks for leadership decisions

Technical Skills Required

Amazon Web Services Kubernetes Java

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

Benefits & Perks

Visa sponsorship available

Interested in opportunities specifically in Canada? Discover our dedicated Visa Sponsorship Jobs in Canada page featuring roles from top employers in this location.

Nice to Have

Experience with payments, digital wallets, or e-commerce transaction integrity (e.g., idempotency, account abuse prevention)

Jenkins, Argo CD, or Flux for CI/CD pipeline security controls

PCI DSS or SOC 2 remediation experience, or external incident response/forensic support

Windows or directory-service security expertise

Security research or open-source contributions

Responsible use of AI tools in engineering and investigation

Job Description

Snaplii is a profitable wallet and payments platform for people and their AI agents: , , and including Costco, Walmart, Amazon and Uber.Muse has taken off, and Snaplii is already live on it, with running on Snaplii. AI helps people decide what to buy. Snaplii completes the payment, safely.We’re hiring a Staff-level individual contributor with strong software engineering skills, deep AWS and Kubernetes security experience, and practical incident response experience. You will write and ship production code, lead security improvements across our applications and cloud environments, and coordinate the technical response to security incidents.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.