Senior Security Engineer

About Float

Float is on a mission to simplify finance for Canadian businesses empowering them to eliminate complexity and unlock new opportunities. Through our innovative platform Float enables businesses to streamline financial operations and optimize cash flow so they can focus on what matters most: growth.

As one of Canadas fastest growing companies and top-rated startups in 2024 and 2023 Float is customer-obsessed passionate and entrepreneurial with a team that includes leaders from Uber Shopify Top Hat TouchBistro and Ada.

At Float everyone is an owner bringing their unique perspective to our team and product. Your voice is important and we take having a culture based on feedback seriously. We openly share our thoughts and differing opinions so we can continue to improve. We do our best to keep our decision-making decentralized so that all team members feel ownership in our success.

Our Product

Float is Canadas complete business finance platform combining modern financial services and software to help businesses spend save and grow. Trusted by 5000 Canadian companies Float provides high-limit corporate cards automated expense management next-day bill payments high-yield accounts and fast friendly supportall built in Canada for Canada. Float is backed by world-class venture and fintech investors including Growth Equity at Goldman Sachs Alternatives and OMERS Ventures partners behind our $70 million Series B raise.

Our team is a collection of ambitious collaborative and mission-driven people from all walks of life but with one goal: helping Canadian companies not just survive but thrive. And were looking for bold innovators to help shape the future of business finance in Canada.

About the Role

Float is building modern financial tools for businesses and security is at the heart of earning customer trust. As a Senior Security Engineer youll help us build and enforce the guardrails that let Float ship fintech features faster and with confidence. Youll lead initiatives that turn tooling installed into controls enforced and measured working hands-on across Floats infrastructure tool stack..

This role combines technical depth with a builders mindset. Youll design secure patterns for infrastructure and application teams automate evidence for PCI DSS 4.0 and SOC 2 and reduce risk through practical measurable controls. Youll partner closely with Platform Engineering IT and Risk & Compliance to make security part of how Float operates every day.

What Youll Be Responsible For

• Owning and improving AWS and GitHub security guardrails including IAM OIDC network segmentation and CI/CD hardening.

• Leading automation for vulnerability management and cloud posture using our security tools and infrastructure-as-code.

• Partnering with developers to embed secure SDLC practices including dependency scanning secret management and threat modeling for high-risk features.

• Helping mature endpoint and identity security while ensuring full coverage and strong baselines.

• Tuning and expanding detection and response capabilities developing playbooks alert pipelines and response automation.

• Contributing to evidence automation for PCI DSS 4.0 and SOC 2 ensuring compliance by default.

• Championing security metrics that matter: coverage time-to-remediate and control effectiveness.

About You

Heres what sets you up for success at Float:

• You Put Customers First Always. You care deeply about delivering meaningful value. Whether youre building internal systems or customer-facing features youre always thinking about how to make life better for our users.

• You Act Like an Owner. You take responsibility for outcomes step up to challenges and seek solutions proactivelydoing whats best for the business not just your role.

• You Think Big and Move Fast. Youre energized by building from 0 to 1. Youre not afraid to challenge the status quo experiment quickly and learn as you go.

• You Constantly Learn and Grow. Youre hungry to improve your craft and open to feedback. You bring a growth mindset to everything you do.

• You Raise the Bar. You care about doing things well and efficiently. You balance speed with rigor and always look for ways to improve how we work.

• You Win as a Team. Youre a generous collaborator who values communication context and shared wins. You lift others up and help make the team stronger.

In addition to living our values you bring:

• Technical Skills and Experience

  • Strong background in security authentication infrastructure and cloud technologies including vulnerability management and threat detection/remediation.

  • Familiarity with integrating security practices into CI/CD pipelines ideally using tools such as Buildkite.

  • Understanding of Infrastructure as Code (IaC) security particularly with Terraform.

  • Knowledge of compliance frameworks such as SOC 2 and ISO 27001.

  • Experience with risk assessment and management in cloud environments as well as network monitoring and intrusion detection/prevention.

  • Hands-on experience with vulnerability scanning tools and methods for identifying prioritizing and remediating vulnerabilities.

  • Strong grasp of common security vulnerabilities (e.g. OWASP Top Ten) and security testing techniques.

  • Experience with Auth0 and Okta for user management SSO and MFA.

  • Familiarity with implementing and managing IAM policies RBAC and user lifecycle best practices.

  • Experience securing PostgreSQL databases (access control encryption auditing).

  • Proficiency in Python for scripting automation and API integrations including developing and maintaining security automation tools.

• Personal Attributes and Mindset

  • You can explain complex technical problems in simple terms adapting your communication for different stakeholders.

  • You understand the business context and how your role supports the companys vision and strategy.

  • Youre strategic yet detail-oriented capable of balancing long-term goals with immediate tactical execution.

  • You ruthlessly prioritize competing demands and manage multiple responsibilities effectively.

  • Youre curious and committed to continuous learning seeking to understand the why behind every solution and engaging thoughtfully in technical discussions.

  • You adapt quickly to change and maintain focus in a dynamic evolving environment.
    

This may not be the role for you if...

• Youre not extremely detail oriented

• You arent a self-starter and dont like to work independently

• Youre not comfortable wearing multiple hats

• You dont like change and adapting to new ways of doing things

• You arent comfortable with ambiguity

• You arent able to translate technical jargon into simple language

• You lack patience for iterative work

• You want detailed to-dos for your tasks and projects

• Youre not keen on learning new things

• You dont have strong stakeholder management skills

• You dont like regular feedback on your work

Why You Should Join

• Work at one of Canadas fastest-growing fintech companies

• Make a real impact in a high-autonomy high-growth role

• Collaborate with an ambitious and supportive team

• Competitive compensation equity options and benefits

• Hybrid work model we are based in Toronto with in-office days for connection and collaboration

• Enjoy catered team lunches every Tuesday Wednesday and Thursday

• Bring your pup to our dog-friendly office

• Thrive in a high-trust high-performance culture where your work truly matters

In Short

At Float youll thrive if youre bold curious and eager to make a real impact. Were building something specialand having a lot of fun along the way. If youre excited to build grow and win together wed love to meet you.

Were committed to building a workplace thats welcoming and accessible for everyone. If you need any accommodations during the hiring process or once you join Float just let us know! You can reach out to Vic () and well work with you to make sure you have what you need to succeed.

Required Experience:

Senior IC