Security Engineer - Remote

Overview

Join us at PolicyMe! We're modernizing insurance and we'd like your help. The Canadian insurance landscape has remained largely unchanged for decades and we are in the process of changing that. We're a remote-first, Toronto-based startup with big ambitions.

In Short

• Design & implement foundational security architecture across infrastructure, cloud, endpoints, and applications.
• Own threat modeling, vulnerability management, and secure coding practices.
• Deploy and manage security tools such as SIEM, EDR, and IAM solutions.
• Establish and enforce security policies & controls across systems and workflows.
• Lead incident response efforts, including detection, triage, resolution, and post-mortems.
• Conduct internal audits & prepare for external audits (SOC 2, etc).
• Train and evangelize security best practices across technical and non-technical teams.
• Help define and grow the security roadmap in line with business and regulatory priorities.

Requirements

• 5+ years of hands-on experience with infrastructure and/or application security in production environments.
• Ability to think like an attacker while building resilient, secure, and scalable systems.
• Excellent communicator who collaborates well across teams.
• Comfortable working in a fast-paced, high-ownership environment.

Benefits

• Generous PTO - 20 vacation days.
• Access to stock options and a comprehensive benefits plan.
• A remote-first team with company paid, in-person socials.
• Resources to help your professional development.
• Work with an empathetic, high-performing team in a flexible environment.