5 hours ago
Remote, CanadaMid Level
Responsibilities
- Monitor, investigate, and respond to security threats across cloud and application environments.
- Participate in security risk assessments, incident response, post-incident reviews, and rotating on-call support.
- Build and maintain security tooling, controls, and automation across cloud, application, and CI/CD environments.
- Identify vulnerabilities and configuration risks and contribute to security runbooks and compliance requirements.
- Use and evaluate AI-powered security tools to improve detection, response, and automation.
- Partner with Engineering teams to provide practical security guidance and translate technical risks into actionable recommendations.
- Contribute to security roadmap planning, technology evaluations, documentation, and process improvement.
Requirements
- At least 3 years of security engineering or security operations experience, or equivalent demonstrated expertise.
- Hands-on experience with cloud, application, and CI/CD security, ideally in AWS, GCP, or Azure environments.
- Experience with security incident response and tooling including EDR, CNAPP, SASE, vulnerability scanners, and log analysis.
- Experience building and maintaining security automation and tooling with Go, Python, Terraform, or similar technologies.
- Strong security judgment and problem-solving ability, including risk assessment and decision-making with incomplete information.
- Production experience using AI/ML-powered security tools and understanding of appropriate human oversight.
- Familiarity with prompt injection, model supply chain risks, or LLM abuse patterns is preferred.
- Experience securing developer platforms, SaaS environments, or CI/CD infrastructure is preferred.
- CEH, AWS Security Specialty, Security+, or equivalent certification is preferred.
- Experience improving team processes, developing security runbooks, or sharing internal knowledge is preferred.
Benefits
- Canada base pay range is $127,500–$159,500 CAD annually.
- The posting describes CircleCI as having a global, remote workforce.
- Reasonable accommodation is available for individuals with disabilities during application, interviews, and employment.
About CircleCI
CircleCI builds a cloud and self-hosted CI/CD platform used by software engineering teams to automate builds, tests, and deployments from GitHub or Bitbucket. It sells subscription and usage‑based SaaS plans for teams and enterprises, with features for containers, parallelism, and security controls. Founded in 2011 and headquartered in San Francisco, the privately held company counts customers such as Hinge and Samsung.