F

Float

Corporate spending platform with real-time reporting

Staff Security Engineer

Security Engineering & ArchitecturePosted on Nov 13
Full-timeToronto, ON, CanadaNo salary listed

About the Job

Requirements

  • At least 8 years of experience as a software engineer or security engineer at a company large enough to build systems and tools in-house.
  • Depth in at least one of application security, identity, or cloud and infrastructure security, with credibility across the other areas.
  • Ability to ship production code to address security findings, using Python and Django or a similar web stack.
  • Hands-on experience designing and building security controls, tooling, or systems, with engineering depth to work as a peer to staff-level engineers.
  • Experience leading a multi-quarter, cross-team technical change through influence rather than authority.
  • Demonstrated interest in security through what the candidate has built, learned, or owned.
  • Experience owning a complex technical problem and shipping it from start to finish.
  • Clear, direct writing and communication with engineers and leaders, including explaining architecture and risk in business terms to drive action.
  • Practical examples of using AI in engineering or security work.

Responsibilities

  • Own the technical strategy for security platform work by setting standards, documenting decisions, and explaining risk to leadership in business terms.
  • Own a major security area end to end, from identifying risks and planning through shipping improvements.
  • Build security primitives into the core backend (Python and Django), such as default-closed authorization and tenancy scoping, and lead adoption across every product team.
  • Shape the customer identity platform, including passwords, passkeys, single sign-on (SSO)/Security Assertion Markup Language (SAML), and machine-to-machine authentication.
  • Threat model and review the architecture and code of new products and major changes, and help redesign them rather than only identify problems.
  • Secure use of AI, including the internal agent platform, Model Context Protocol (MCP) gateways, and data flowing through them.
  • Establish security foundations about six months before teams begin building in new areas.
  • Lead multi-quarter efforts across several engineers as the security representative, minimizing drag on engineering delivery, and mentor engineers on and off the security team.
  • Present significant architectural and engineering changes and their risks to engineers and leaders so they understand and act.
  • Harden continuous integration and continuous delivery (CI/CD) and the software supply chain, and implement controls as code, including infrastructure as code and policy as code, rather than relying on manual work.
  • Help secure the platform as it moves to Kubernetes, including workload isolation, network policy, identity and access management (IAM), and secrets.
  • Build in-house tools and capabilities when that is more effective than purchasing them as the company grows.
  • Provide timely, practical advice early in the process so teams spend less time waiting on security.
  • Identify company-wide security blind spots and help set investment priorities.
  • Use AI tools to accelerate threat modeling, reviews, investigations, and building.

Desired Qualifications

  • Fintech, payments, or Payment Card Industry Data Security Standard (PCI DSS) experience.
  • Experience building or operating an identity platform at scale.
  • Detection engineering or incident response experience.
  • Experience securing large language model (LLM) or agent systems.
  • Experience securing container and Kubernetes infrastructure.
  • Experience bringing a purchased tool in-house.

About the Company

Float

Corporate spending platform with real-time reporting

Float is a fintech platform for business spending that combines smart corporate cards with expense management. It lets finance teams issue unlimited virtual cards for vendors and employees, fund those cards as needed, and set spending limits, all in CAD or USD. The platform provides real-time expense reporting to spot unusual activity and opportunities for savings, helping companies manage and reconcile spending quickly. Revenue comes from subscription fees and from the interest earned on clients’ cash balances. Float differentiates itself by offering 4% interest on cash balances in both CAD and USD, a strong customer-support promise, and tools designed to give businesses tighter control over spending and cash flow compared with traditional banks. The company’s goal is to automate and simplify business spending while giving teams more visibility and control over their finances, across Canadian and cross-border use.

Company size
201-500
Company stage
Series C
Total funding
$257.3M
Headquarters
Toronto, Canada
Founded
2019

Recently Posted Jobs

Explore more opportunities at Float

See more jobs