Senior Security Engineer (Application & Platform Security)
Toronto, Ontario, Canada {{REMOTE}}
Senior Level
Full-Time
Top Benefits
Competitive Compensation & Equity
401k Plan
Medical, Dental, Vision Insurance
About the role
- The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between
- We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset
- We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on
- That context shapes everything about how we operate
- As a Senior Security Engineer on this team, you’ll work across application and platform security domains
- You’ll own and shape the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right
- You’ll partner closely with product and engineering teams to influence how features are designed and built from the start
- You will work as a technical collaborator who helps make the secure path the obvious one
- As Sentry expands our agentic product capabilities and development practices, you’ll also find yourself at the frontier of a new set of security challenges
- Own and mature Sentry’s security review program. From secure code review, to architecture review, and threat modeling. You will build processes, tooling, and culture which makes security a natural part of how we ship and operate
- Influence mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and management of our bug bounty and responsible disclosure program
- Champion secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows
- Validate and reproduce application and infrastructure security findings. Scanning, manual testing, coordinate penetration testing and vulnerability validation across Sentry’s application, SDKs and cloud-based platform
- Evaluate and respond to emerging threats relevant to application security Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry’s agentic product features and AI-assisted engineering practices
Benefits
- Competitive Compensation + Equity
- 401k Plan
- Medical, Dental, Vision Insurance
- Commuter Stipend
- Professional Development Stipend
- Health & Wellness Benefits
- Charitable Matching Program
- Flexible PTO
- Paid Parental Leave- Enjoy operating cross-functionally, building relationships, and influencing with technical expertise, and shaping how security gets done across a fast-moving engineering organization
- Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven’t seen before
- Reach for automation first, you’d rather build a scalable, systematic solution to a security problem than solve it manually a hundred times
- Thrive with real ownership, you prefer to build and drive work end-to-end, you’re energized by the autonomy that comes with being on a small, high-trust team
- Love working in an developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction
- 5+ years of industry experience designing, building, securing complex applications and large-scale distributed cloud systems
- Direct experience with security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs
- Degree in Computer Science or a related field, equivalent training, or professional experience
- A collaborative approach to problem solving paired with strong written and verbal communication
- Experienced and comfortable programming in at least one language, must be comfortable reviewing Python, Typescript, Go, Rust applications
- Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and securing those technologies (cloud networking, IAM, etc.)
- Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We’re interested in people are excited about this opportunity and eager to grow