Senior Product Security Engineer

Role overview Build and operate an insider risk programme that helps protect sensitive systems and data while handling investigations carefully and proportionately. The role combines security engineering, threat detection, investigative practice, and automation, in close partnership with legal, people, privacy, and compliance teams.

Responsibilities - Design and run core programme workstreams, including investigative standards, playbooks, metrics, and reporting. - Support investigations by analyzing telemetry and evidence, reconstructing timelines, and preparing findings and risk recommendations. - Work with legal, employee relations, privacy, and compliance partners on case handling and escalation criteria. - Threat model high-risk systems and data, then work with detection engineers to develop production detections. - Improve controls such as data loss prevention, endpoint monitoring, access governance, and contractor access safeguards. - Automate evidence collection, case routing, and reporting; develop investigation support automations with clear human review points.

Requirements - Deep experience in security engineering, security operations, insider risk, or digital forensics. - A record of establishing security capabilities and managing investigations from evidence handling through written conclusions. - Ability to write and assess detection logic across endpoint, identity, cloud, and SaaS data in a SIEM. - Practical experience with insider risk controls or tools such as DLP, UEBA, endpoint detection, CASB, or access governance. - Working knowledge of Python and production workflow automation platforms. - Sound judgment with sensitive cases, strong communication, and ability to work across security, engineering, legal, HR, privacy, and compliance.

Nice to have - Experience with agentic or LLM-enabled investigation support, including defining where human review is needed. - Background in regulated or financial services environments, including SOC 2, PCI DSS, or GLBA.

Benefits and work setup Remote-first role open to candidates residing in specified Canadian provinces. The package includes employer-paid health coverage for employees and dependents, monthly technology and wellness stipends, flexible time off, and access to an employee stock purchase plan. New hires attend an in-person onboarding experience.