At Shakepay, we’re on a mission to usher in the Bitcoin golden age. We’re reimagining financial services to give every Canadian their fair shake.
Our culture is built around doing work that matters, winning as a team, and celebrating success. If you’re the kind of person who values growth, shipping fast, and sharing your ideas openly with a group of like-minded people, come and build with us!

ABOUT SHAKEPAY

Since 2015, we’ve been building the Shakepay app to make buying and earning bitcoin fast, easy, and secure. In 2022, we launched the Shakepay Card, allowing shakers to earn bitcoin rewards when they shop. Today, more than one million Canadians use Shakepay to grow their bitcoin savings and take control of their financial future.
We’re regulated across all Canadian provinces and territories, and backed by renowned venture capitalists with a funding of $44M. We have a passionate, loyal, and growing community, and we’re looking for people who want to help us build something truly special.

WHO WE ARE LOOKING FOR

• 5+ years of broad Security experience, including but not limited to; Enterprise & Operational Security, Incident Response, Offensive Security, GRC, and Product Security.
• 5+ years experience in a cloud environment (AWS preferred)
• Proficiency in a high-level programming language for building and maintaining our alerting capabilities and to automate Security tasks
• Clear sense ownership and exceptional communication skills to manage expectations, timing, scope, and priority of the work you’re responsible for
• Passion for scaling Security through simplicity and enabling a Security first culture
• Experience in a highly regulated environment (preferably a startup)

• Work closely with across all of Shakepay to design and drive high impact solutions with the right balance between security, customer experience, and product growth
• Be a subject matter expert and mentor across multiple domains within security and provide impactful output that can be ingested by both operational and engineering focused teams
• Manage relationships, internally and externally, regarding Security processes, services, and vendors.
• Lead threat modeling discussions for both existing production systems and systems in development
• Own maintaining and improving our Zero Trust environment
• Build, tune, and automate alert responses in code
• Participate in an on-call rotation and serve as the technical lead during incidents
• Participate in governance, compliance, and regulatory audits (SOC2, ISO 27001, PCI, etc.)