10 hours ago
Sydney, AustraliaStaff+
Responsibilities
- Partner with teams across the business to identify risks and build security roadmaps.
- Help teams enable AI workflows safely and review new tools and agents before deployment.
- Threat model MCP, agentic workflows, SaaS-to-SaaS integrations, and AI-agent activity.
- Define security standards and develop controls that other teams can adopt.
- Build and run production security services for endpoints, networks, identities, and SaaS environments.
- Automate security work to scale without proportionally increasing the team.
- Set technical direction as an individual contributor without direct people management.
Requirements
- Hands-on experience in enterprise, corporate, or internal security engineering.
- Experience building and operating security services in production across endpoints, networks, identity, and SaaS estates.
- Ability to identify security problems, gain stakeholder support, and deliver fixes.
- Ability to influence IT and engineering leaders without relying on formal authority.
- Strong code-writing and code-review skills, with an automation-first approach.
- Preferred experience with broad enterprise security, macOS fleet security, device trust, posture signals, zero trust, and certificate-based device attestation.
- Preferred experience with SaaS security posture, configuration baselines, SSPM, OAuth, third-party integration risk, and non-human identities.
- Preferred experience securing AI agents, MCP servers, or agentic workflows, including action-level policy, tool-call mediation, audit trails, and containment.
- Preferred experience with Terraform, Python, Go, AWS, or GCP.
Benefits
- Equity packages.
- Inclusive parental leave for all parents and carers.
- Annual Vibe & Thrive allowance for wellbeing, social connection, office setup, and more.
- Flexible leave options.
- Permanent employment based in Sydney with hybrid remote and campus work.
- Virtual interviews.
About Canva
Canva builds a web-based visual design and collaboration platform used by individuals, teams, schools, and small businesses to create presentations, documents, social posts, videos, and more. The company monetizes via subscriptions (Canva Pro, Teams, and Enterprise), paid stock media, and optional print services. Founded in 2012 and headquartered in Surry Hills, New South Wales, Canva is privately held and operates globally with hubs in Australia and beyond.