Security Engineer

Position Overview

• Location Type: Remote-First (Toronto-based)
• Employment Type: Full-time
• Salary: Not specified
• Company: PolicyMe

Overview: PolicyMe, a modernizing insurtech startup, is seeking a Security Engineer to play a foundational role in shaping how the platform, data, and customers are protected. This is a high-impact, high-autonomy role where you will build smart systems and strong foundations from the ground up. PolicyMe is focused on revolutionizing the Canadian insurance landscape.

Tech Stack

• React
• Redux
• Python
• Webpack
• Gatsby
• Node.js
• PostgreSQL
• AWS

Requirements

• Experience: 5+ years of hands-on experience with infrastructure and/or application security in production environments.
• Mindset: Possess a “builder and breaker” mindset – ability to think like an attacker while building resilient and secure systems.
• Communication: Excellent communication skills, with the ability to collaborate effectively across teams and clearly explain security risks.
• Startup Environment: Comfortable working in a fast-paced, high-ownership environment.

Responsibilities

• Security Architecture: Design and implement foundational security architecture across infrastructure, cloud, endpoints, and applications.
• AWS Expertise: Demonstrate familiarity with the AWS suite of services including Security Hub, Inspector, Systems Manager, GuardDuty, CloudTrail, etc.
• Threat Management: Own threat modeling, vulnerability management, and secure coding practices.
• Tool Deployment: Deploy and manage security tools such as SIEM, EDR, and IAM solutions.
• Monitoring & Alerting: Set up proper monitoring and alerting mechanisms.
• Policy Enforcement: Establish and enforce security policies & controls across systems and workflows.
• OWASP Countermeasures: Incorporate OWASP Top Ten and OWASP API Top Ten counter-measures.
• Incident Response: Lead incident response efforts, including detection, triage, resolution, and post-mortems.
• Audits: Conduct internal audits and prepare for external audits (SOC 2, etc.).
• Training & Evangelism: Train and evangelize security best practices across technical and non-technical teams.
• Roadmap Definition: Assist in defining and growing the security roadmap in alignment with business and regulatory priorities.

Application Instructions

• Not specified.

Company Information

About PolicyMe: PolicyMe is a Venture-Backed InsurTech startup on a mission to put families first, protecting them with the honest and uncomplicated life insurance they deserve. Through technology, PolicyMe aims to change the insurance landscape.

Why Join Us

• PTO: Generous PTO - 20 vacation days.
• Stock Options: Access to stock options.
• Benefits: Comprehensive benefits plan.
• Remote Flexibility: Remote-first team with company-paid, in-person socials and the option to work from the Toronto-based office.
• Professional Development: Access to resources for professional development, including an L&D budget, performance reviews twice a year, and ongoing feedback.
• Team Culture: Work with an empathetic, high-performing team in a flexible, results-oriented environment.

Reports To

• DevOpsSec Manager