8 days ago
Responsibilities
- Design, build, and maintain internal security tooling for League’s engineering organization.
- Develop automation for application security, secrets management, identity management, vulnerability remediation, policy enforcement, and secure software delivery.
- Build backend security services and APIs for authentication, authorization, access governance, OAuth/OIDC flows, token lifecycle management, RBAC, service authentication, and secure sessions.
- Automate cloud, infrastructure, workload identity, encryption, container, Kubernetes, and runtime security controls across AWS, GCP, and Kubernetes.
- Improve security observability and monitoring for security events, anomalous behavior, and operational risk.
- Develop security capabilities and controls for AI-enabled systems and sensitive healthcare data usage.
- Collaborate with Security, Infrastructure, Platform Engineering, Compliance, and Product Engineering teams to improve secure engineering practices.
- Support security incident response, root cause analysis, and remediation when required.
- Execute departmental security policies and procedures and report incidents, breaches, or policy violations.
Requirements
- 5+ years of software engineering experience with a strong focus on security engineering, platform engineering, or infrastructure security.
- Experience building internal engineering or security tooling in cloud-native production environments.
- Strong hands-on backend engineering experience building APIs, services, and automation systems.
- Production experience implementing secure authentication and authorization systems.
- Experience integrating security tooling into CI/CD pipelines and developer workflows.
- Production experience with Kubernetes and distributed systems.
- Experience in healthcare, fintech, or enterprise SaaS is strongly preferred.
- Experience with AI-enabled systems, AI-assisted engineering workflows, or LLM-based applications is a strong asset.
- Demonstrated practical and responsible use of AI tools, with sound judgment regarding accuracy, bias, quality, and sensitive data.
Benefits
- The role is full-time and offers a Canada base salary range of $159,100—$198,000 CAD, exclusive of bonus, equity, and benefits.
- Toronto-area employees living within 65 km of the downtown headquarters collaborate in-office Monday through Thursday and receive 10 or 20 flexible remote days per quarter depending on distance.
- Remote-eligible roles may be based anywhere in Canada or the US, as indicated by the specific posting location.
- League provides an equal employment opportunity workplace and recruitment assistance for candidates who need it.
- The hiring process includes recruiter review, role-specific interviews, reference and background checks, and potentially additional checks for US candidates.
Tech Stack
About League
Founded in 2014, League is a platform technology company powering the next generation of healthcare consumer experiences. Payers, providers, and consumer health organizations build on League's healthcare experience platform to deliver personalized, high-engagement health experiences that close care gaps, reduce costs, and drive better outcomes. League's platform is built to meet the most stringent standards in healthcare, including HITRUST r2, SOC 2 Type II, HIPAA, PIPEDA, and GDPR compliance, with security, privacy, and AI guardrails built in by design. Millions of people use solutions powered by League to access, navigate, and manage their health every day. Learn more at league.com.