Search jobs

Vulnerability and incident management

Create a clear operating model for finding, prioritizing, investigating, remediating, and learning from security issues and incidents.

• Own vulnerability intake, prioritization and remediation SLAs.
• Track root causes and ensure corrective actions are completed and satisfactory.
• Triage security alerts and coordinate investigations.
• Maintain incident-response plans and conduct exercises.
• Document escalation and communication procedures.

Governance, Risk and Compliance (GRC)

Maintain the policies, controls, evidence, and customer-facing security posture needed to meet regulatory, audit, sales, and legal expectations.

• Participate in the review and operation of current programs, including SOC 2, GDPR, and PCI.
• Coordinate auditors and external assessments.
• Help the Sales team with security questionnaires that they cannot answer confidently.
• Support the CTO in sales and legal negotiations involving security commitments.
• Review vendors and subprocessors’ security controls.

Security enablement

Scale security across the company through training, guardrails, champions, roadmap planning, and leadership visibility.

• Build and enforce training for engineering and employees.
• Build reusable guardrails that scale without manually approving everything.
• Establish security champions across Engineering to aid in security initiatives.
• Maintain a prioritized security roadmap.
• Report material risks and progress to leadership.
• Participate in the long-term plan to build the security team.

🎖️ Qualifications

Technical

• At least five (5) years of experience in Software Engineering, Application Security, Infrastructure Security, or a closely related technical role.
• Strong experience securing modern web applications, APIs, distributed systems, and cloud infrastructure.
• Strong experience with AWS.
• Strong experience with the JavaScript / TypeScript ecosystem.
• Experience with React.
• Experience working with microservices, serverless architectures, infrastructure-as-code, CI/CD pipelines, and production systems.
• Strong understanding of authentication, authorization, secrets management, IAM, logging, monitoring, and secure SDLC practices.
• Experience with penetration testing, bug bounty programs, SAST, dependency scanning, etc.

Personal

• Stellar judgement and pragmatism when making and implementing critical business decisions.
• Rigorous, calm, and level-headed approach to incidents, ambiguity, and high-stakes situations.
• Impressive communication skills, with the ability to coach, influence, and enable teams without slowing them down unnecessarily.
• Ability to prioritize security work based on business impact, customer risk, operational urgency, and engineering feasibility.
• Experience reviewing product architecture, identifying practical security risks, and partnering with engineering teams to implement effective mitigations.

🪄 Nice-to-haves

• You have experience with GraphQL.
• You have knowledge of telecom concepts.
• You have experience working on a System of Record.
• You have experience with compliance programs.
• You have experience supporting sales and legal conversations involving security commitments.
• You have experience building ****security programs in a high-growth SaaS company.

💰 Salary

At gaiia, we have a transparent salary philosophy and a robust evaluation and compensation framework. It translates to a fair and impartial model where salaries are published internally, healthy discussions around compensation and performance can exist, and taboos are removed.

The salary range for this role is $130,000-$180,000 .

🔆 Benefits

• Flexible 25 days vacation.
• Stock Options Plan.
• Group Insurance.
• Telemedicine.
• Life and Health Spending Accounts.
• Group Retirement Savings Plan (RRSP).
• Flexible working hours & all-remote work.

We are an equal-opportunity employer committed to inclusivity and diversity. Our workplace is fully remote and boasts accessible technologies, ensuring all team members can thrive. Should you require accommodations due to a disability during the application process, please contact us at 581-996-9639 or people@gaiia.com as per the Accessible Canada Act and human rights legislation. We're here to support you every step of the way.

#LI-DNI