Canals Logo

Canals

Lead Security Engineer

Posted One Month Ago
Be an Early Applicant
In-Office or Remote
Hiring Remotely in São Paulo
Senior level
In-Office or Remote
Hiring Remotely in São Paulo
Senior level
Own security outcomes across product and infrastructure: identify high-impact risks and drive remediation; manage application security tooling for code, dependencies, and secrets; lead threat modeling, risk assessments, and architecture reviews; validate and triage bug bounty and pentest findings; and lead security monitoring, incident response, and investigations.
The summary above was generated by AI
About Canals

Canals builds software for wholesale distributors, helping them operate more efficiently through automation and AI.

Our customers are the companies responsible for moving the materials that power the real economy; electrical supplies, plumbing products, roofing materials, HVAC equipment, and more. Every day, thousands of people rely on Canals to help process orders, manage purchasing, handle accounts payable, and streamline critical business workflows.

We're a profitable, rapidly growing company with a team of roughly 100 people distributed across North and South America. We care deeply about building great products, hiring exceptional people, and creating an environment where talented individuals can do the best work of their careers.

The Opportunity

Our customer base is growing rapidly. As more customers onboard and existing customers scale, the security surface of our platform grows with it. We’re looking for a senior security engineer who can move quickly, think system-wide, and raise the security bar across our product and infrastructure.

This role is about owning security outcomes, not just finding issues. You’ll identify the where there's risk and lead remediation. You’ll have the autonomy to shape our security strategy while staying deeply hands-on with the systems that matter most.
What You’ll Do

  • Identify the highest-impact security risks and lead remediation end-to-end.

  • Own application security tooling for code, dependencies, and secrets.

  • Lead threat modeling, risk assessments, and architecture reviews for new and existing services.

  • Validate and triage findings from bug bounties and pentests.

  • Lead security monitoring and incident response: alerts, investigations, and follow-through.

What We’re Looking For

  • Strong security engineering background with hands-on experience securing production systems.

  • Ability to drive remediation across teams with clear priorities and follow-up.

  • Comfort taking ownership of deliverables and ensuring projects are delivered to a high standard.

  • Strong communication skills and comfort working remotely in a fast-moving, product-focused environment.

  • Experience integrating security into CI/CD and infrastructure-as-code workflows.

  • Previous experience in high-growth startups or small teams is a plus.

Why Join Canals

We're building software that solves real problems for an industry that keeps the world running. Our customers rely on our platform every day to operate their businesses.

We've found strong product-market fit and continue to grow quickly, creating opportunities for people who want to have a meaningful impact on the trajectory of a company.

We believe great people build great companies. That's why we invest heavily in hiring, development, and creating an environment where talented individuals can do the best work of their careers.

You'll work alongside ambitious, thoughtful teammates who care deeply about what they do, challenge each other directly, and have a lot of fun along the way.

We value ownership, transparency, and continuous improvement. Good ideas can come from anywhere, and people are trusted to make things happen.

We're remote-first, flexible, and distributed across North and South America, bringing together talented people from a wide range of backgrounds and experiences.

Canals.ai is an equal opportunity employer. In addition to EEO being the law, it is a policy that is fully consistent with our principles. All qualified applicants will receive consideration for employment without regard to status as a protected veteran or a qualified individual with a disability, or other protected status such as race, religion, color, national origin, sex, sexual orientation, gender identity, genetic information, pregnancy or age.

Similar Jobs

4 Days Ago
Remote
United States
Senior level
Senior level
Other • Travel
Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.
Top Skills: Application SecurityAWSCcpaGdprIdentity And Access ManagementIso 27001Pci DssSoc 2Vulnerability Management
Yesterday
Remote or Hybrid
Senior level
Senior level
Information Technology • Productivity • Software • Infrastructure as a Service (IaaS)
Develop scalable Java and Kotlin software for NinjaOne’s ticketing and billing products. Build reliable systems for ticket workflows, invoicing, quoting, accounting integrations, and endpoint-management connections. Responsibilities include implementing enterprise software, scaling data structures and services, applying object-oriented design, developing REST APIs, working with relational databases and Redis, and maintaining rigorous testing and quality standards.
Top Skills: AWSC++GoJavaJerseyKotlinPostgresRedisRestSpring
Yesterday
In-Office or Remote
Entry level
Entry level
Digital Media • Gaming • Software • Esports • Automation
Manage public affairs and government relationships for bet365’s regulated Brazilian market entry. Build partnerships with policymakers, regulators, media, sports bodies, law firms, and consultants. Monitor legislation, participate in public consultations, prepare political analysis and reports, respond to regulatory inquiries, and develop strategies influencing policy decisions. The role requires Brazilian regulatory expertise, corporate diplomacy, Portuguese fluency, English proficiency, residence in Brasília, and frequent travel.

What you need to know about the Boston Tech Scene

Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.

Key Facts About Boston Tech

  • Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
  • Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
  • Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
  • Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account