Staff Security Engineer

Get roles like this by email

New roles in Waterloo Region, mailed the morning after they appear, and The Weekly each Monday.

Change or stop it from any email.

This posting reflects a current, actively recruited opening at Float. All applications are being reviewed on a rolling basis.

About Float

Float is on a mission to simplify finance for Canadian businesses, empowering them to eliminate complexity and unlock new opportunities. Through our innovative platform, Float enables businesses to streamline financial operations and optimize cash flow, so they can focus on what matters most: growth.

As one of Canada’s fastest growing companies and top-rated startups in 2025, 2024 and 2023, Float is customer-obsessed, passionate and entrepreneurial, with a team that includes leaders from Uber, Stripe, Shopify, Top Hat, Ada, Doordash, Snowflake, and Wealthsimple.

At Float, everyone is an owner, bringing their unique perspective to our team and product. Your voice is important, and we take having a culture based on feedback seriously. We openly share our thoughts and differing opinions so we can continue to improve. We do our best to keep our decision-making decentralized so that all team members feel ownership in our success.

Our Product

Float is Canada’s intelligent financial operating system, combining modern financial services and software to help businesses spend, save, and grow. Trusted by more than 10,000 Canadian companies, Float provides high-limit corporate cards, automated expense management, next-day bill payments, high-yield accounts, and industry-leading support, all built in Canada, for Canada. Float recently announced our $85 million Series C, and is backed by world-class investors, including Inovia Capital, Growth Equity at Goldman Sachs Alternatives, OMERS Ventures, and Silicon Valley Bank.

Our team is a collection of ambitious, collaborative and mission-driven people from all walks of life but with one goal: helping Canadian companies not just survive but thrive. And we’re looking for bold innovators to help shape the future of business finance in Canada.

AI Use in Our Hiring Process

We use technology, including artificial intelligence (AI), to support parts of our hiring process. This may include AI-assisted scheduling and candidate communications, and AI-generated interview notes, guides or summaries to help our team focus on the conversation. All hiring decisions are made by our hiring team.

About the Role

We're hiring Float's first Staff Security Engineer, to own the technical direction of our security platform: application, infrastructure and identity security. Our security team is small and builds more than it buys. We write our own detections, run our own agent platform, and fix things at the root. Float's engineers build quickly and we don't run big security gates, so your job is to make the secure path the easy one. You'll take a complex area of security, own it from end to end, and design the fixes alongside engineering, then drive them through to adoption across product teams. You'll look ahead too, setting up the foundations for new products, and for how we run AI tools safely, well before teams start building. You'll work as a peer to our staff and principal engineers, and explain big architectural changes and the risk behind them in a way that moves everyone toward the outcome.

What You'll Be Responsible For

• Own the technical strategy for security platform work: set standards, write down decisions, and explain risk to leadership in business terms.

• Own a major area of security end to end, from the risks and the plan through to shipped improvements.

• Build security primitives into our core backend (Python and Django), such as default-closed authorization and tenancy scoping, then lead adoption across every product team.

• Shape our customer identity platform: passwords, passkeys, SSO/SAML and machine-to-machine authentication.

• Threat model and review the architecture and code of new products and large changes, and help redesign things so they are better, not only point out what's wrong.

• Secure how we use AI: our internal agent platform, MCP gateways, and the data that flows through them.

• Look ahead and put security foundations in place about six months before teams start building in a new area.

• Lead multi-quarter efforts across several engineers as the security voice in the room, with minimal drag on engineering delivery, and mentor engineers on and off the security team.

• Present significant architectural and engineering changes, with the risks, to engineers and leaders so they understand and act.

• Harden our CI/CD and software supply chain, and turn controls into code (infrastructure as code, policy as code) instead of manual work.

• Help secure the platform as we move to Kubernetes: workload isolation, network policy, IAM and secrets.

• Build in-house tools and capabilities where it makes more sense than buying them as Float grows.

• Give timely, practical advice early in the process so teams spend less time waiting on security.

• Identify blind spots across the company and help set priorities for where security should invest.

• Use AI tools to move faster on threat modelling, reviews, investigation and building.

About You

Here's what sets you up for success at Float:

• You Put Customers First, Always. You care deeply about delivering meaningful value. Whether you're building internal systems or customer-facing features, you're always thinking about how to make life better for our users.

• You Act Like an Owner. You take responsibility for outcomes, step up to challenges, and seek…