Senior Staff Engineer - Product Security at Faire

Faire

Toronto, ON·2h ago

SeniorFull-timeTypeScriptPythonJavaAWSGCPKubernetesTerraformMySQLMachine LearningCI/CD

Salary Range

$86,190 - $116,610 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for a Senior Staff Software Engineer, Product Security to join our Engineering organization at Faire. This role will be the technical lead for the Product Security domain, setting the long-term technical direction for how security is designed, built, and automated across Faire’s application stack.

Key Responsibilities

→Set the long-term technical direction for application security at Faire, establishing scalable, developer-friendly frameworks and principles that enable secure development across all product areas.
→Lead the design and implementation of high-impact, reusable frameworks for security use cases such as authentication, authorization, secrets management, and data protection.
→Architect and automate security controls within our development and deployment pipelines — enabling proactive prevention, detection, and remediation of vulnerabilities at scale.
→Partner with senior engineering and platform leaders to influence system design, threat models, and architecture decisions that strengthen Faire’s overall security posture.
→Drive strategic cross-functional initiatives, collaborating with Platform, Infrastructure, Risk, and Compliance teams to integrate security deeply into our technical and operational foundations.
→Mentor and guide engineers across the organization, raising the bar for secure software design, technical rigor, and security-first thinking.
→Lead complex investigations and incident response efforts, ensuring rapid, effective remediation and continuous improvement of our security systems.

Requirements

✓Deep expertise in software security architecture and engineering, with a proven ability to design and scale security frameworks across a large, distributed system.
✓Strong programming skills and experience in multiple languages (e.g., Kotlin, Python, TypeScript, Java, or Go), with the ability to influence engineering design through code and review.
✓A track record of technical leadership — driving company-wide or cross-organizational initiatives that improved security posture, developer experience, or system resilience.
✓Experience building and deploying security automation at scale, including CI/CD integrations, vulnerability management pipelines, and automated testing or remediation frameworks.
✓Hands-on experience with cloud environments and modern infrastructure (AWS, OCI, GCP), including Kubernetes, Terraform, and container security.
✓A deep understanding of application security principles and practices, including authentication, authorization, data protection, and common web application vulnerabilities (OWASP Top 10).
✓A strategic mindset — you can balance risk reduction with engineering velocity and developer enablement.
✓Excellent communication and collaboration skills, with the ability to influence senior leaders and guide engineering teams across multiple domains.
✓A passion for mentoring others and cultivating a security-first engineering culture through partnership, guidance, and empathy.