Canals Logo

Canals

Lead Security Engineer

Posted One Month Ago
Be an Early Applicant
In-Office or Remote
Hiring Remotely in São Paulo
Senior level
In-Office or Remote
Hiring Remotely in São Paulo
Senior level
Own security outcomes across product and infrastructure: identify high-impact risks and drive remediation; manage application security tooling for code, dependencies, and secrets; lead threat modeling, risk assessments, and architecture reviews; validate and triage bug bounty and pentest findings; and lead security monitoring, incident response, and investigations.
The summary above was generated by AI
About Canals

Canals builds software for wholesale distributors, helping them operate more efficiently through automation and AI.

Our customers are the companies responsible for moving the materials that power the real economy; electrical supplies, plumbing products, roofing materials, HVAC equipment, and more. Every day, thousands of people rely on Canals to help process orders, manage purchasing, handle accounts payable, and streamline critical business workflows.

We're a profitable, rapidly growing company with a team of roughly 100 people distributed across North and South America. We care deeply about building great products, hiring exceptional people, and creating an environment where talented individuals can do the best work of their careers.

The Opportunity

Our customer base is growing rapidly. As more customers onboard and existing customers scale, the security surface of our platform grows with it. We’re looking for a senior security engineer who can move quickly, think system-wide, and raise the security bar across our product and infrastructure.

This role is about owning security outcomes, not just finding issues. You’ll identify the where there's risk and lead remediation. You’ll have the autonomy to shape our security strategy while staying deeply hands-on with the systems that matter most.
What You’ll Do

  • Identify the highest-impact security risks and lead remediation end-to-end.

  • Own application security tooling for code, dependencies, and secrets.

  • Lead threat modeling, risk assessments, and architecture reviews for new and existing services.

  • Validate and triage findings from bug bounties and pentests.

  • Lead security monitoring and incident response: alerts, investigations, and follow-through.

What We’re Looking For

  • Strong security engineering background with hands-on experience securing production systems.

  • Ability to drive remediation across teams with clear priorities and follow-up.

  • Comfort taking ownership of deliverables and ensuring projects are delivered to a high standard.

  • Strong communication skills and comfort working remotely in a fast-moving, product-focused environment.

  • Experience integrating security into CI/CD and infrastructure-as-code workflows.

  • Previous experience in high-growth startups or small teams is a plus.

Why Join Canals

We're building software that solves real problems for an industry that keeps the world running. Our customers rely on our platform every day to operate their businesses.

We've found strong product-market fit and continue to grow quickly, creating opportunities for people who want to have a meaningful impact on the trajectory of a company.

We believe great people build great companies. That's why we invest heavily in hiring, development, and creating an environment where talented individuals can do the best work of their careers.

You'll work alongside ambitious, thoughtful teammates who care deeply about what they do, challenge each other directly, and have a lot of fun along the way.

We value ownership, transparency, and continuous improvement. Good ideas can come from anywhere, and people are trusted to make things happen.

We're remote-first, flexible, and distributed across North and South America, bringing together talented people from a wide range of backgrounds and experiences.

Canals.ai is an equal opportunity employer. In addition to EEO being the law, it is a policy that is fully consistent with our principles. All qualified applicants will receive consideration for employment without regard to status as a protected veteran or a qualified individual with a disability, or other protected status such as race, religion, color, national origin, sex, sexual orientation, gender identity, genetic information, pregnancy or age.

Similar Jobs

5 Days Ago
Remote
United States
Senior level
Senior level
Other • Travel
Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.
Top Skills: Application SecurityAWSCcpaGdprIdentity And Access ManagementIso 27001Pci DssSoc 2Vulnerability Management
Yesterday
Remote or Hybrid
Entry level
Entry level
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Entry-level consultant supporting clients with strategic problem-solving through data-driven business experimentation. Responsibilities include analyzing quantitative information, developing strategic recommendations, collaborating on small teams, building client relationships, communicating complex ideas, and contributing to business development, account management, and product management activities.
2 Days Ago
Remote or Hybrid
Senior level
Senior level
Information Technology • Productivity • Software • Infrastructure as a Service (IaaS)
Develop scalable Java and Kotlin software for NinjaOne’s ticketing and billing products. Build reliable systems for ticket workflows, invoicing, quoting, accounting integrations, and endpoint-management connections. Responsibilities include implementing enterprise software, scaling data structures and services, applying object-oriented design, developing REST APIs, working with relational databases and Redis, and maintaining rigorous testing and quality standards.
Top Skills: AWSC++GoJavaJerseyKotlinPostgresRedisRestSpring

What you need to know about the Chicago Tech Scene

With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.

Key Facts About Chicago Tech

  • Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
  • Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
  • Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
  • Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account