Staff Security Engineer

Canva
Sydney
Workplace: HybridFull timeFunction: CybersecuritySkills: ["Problem-solving","Stakeholder management","Technical leadership","Code review","Automation mindset"]

Help secure Canva’s internal environment as an individual contributor, covering laptops, networks, identities, SaaS tools, and emerging AI agents. Work across the business to identify real risks, build security roadmaps, and enable safe AI workflows. Review new tools and agents, perform threat modelling for MCP/agentic patterns and SaaS-to-SaaS integrations, and set scalable standards through automation so controls multiply without adding headcount.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Canva
Canva
11 hours ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Help secure Canva’s internal environment as an individual contributor, covering laptops, networks, identities, SaaS tools, and emerging AI agents. Work across the business to identify real risks, build security roadmaps, and enable safe AI workflows. Review new tools and agents, perform threat modelling for MCP/agentic patterns and SaaS-to-SaaS integrations, and set scalable standards through automation so controls multiply without adding headcount.
Location: Sydney
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Secure Canva’s internal environment, including endpoints, networks, identities, SaaS tools, and AI agents performing work.
  • •Partner with teams across the business to identify real risks and co-build security roadmaps.
  • •Help teams turn on AI workflows safely and support safe agent/tool rollout decisions.
  • •Review new tools and agents before launch, defining when to approve, block, or approve with settings.
  • •Threat model newer patterns (MCP, agentic workflows, SaaS-to-SaaS integrations) and translate findings into adoptable controls and standards via automation.

Pay and Benefits

Perks:EquityParental LeaveWellness StipendPaid Leave

Key Requirements

  • •Go looking for problems, demonstrate impact from discovery through stakeholder buy-in, and see fixes through to completion.
  • •Convince IT or engineering leads to adopt security work that wasn’t on their roadmap.
  • •Hands-on enterprise/corporate/internal security engineering experience, including building and running production security services (endpoints, networks, identity, SaaS estates).
  • •Value concepts over tools—explain why controls work, and write/review trusted code while automating by default.
  • •Experience securing or enabling modern patterns like AI workflows and integrations, including policy/control concepts.
Experience:Enterprise securityInternal securitySaaSAIZero trust
Skills:Problem-solvingStakeholder managementTechnical leadershipCode reviewAutomation mindset
Languages:English
Tech Stack:MacOSZero trustOAuthSSPMTerraformPythonGoAWSGCPMCPSaaSAI agentsCertificate-based device attestation

Company Brief

Canva
Canva is an online visual communications platform that provides drag-and-drop design tools, templates, and media assets for creating presentations, social media graphics, videos, documents and more, serving individuals and large enterprises globally.
Industry: Enterprise Software
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Series E+
Headquarters: Surry Hills, New South Wales, Australia
Founded: 2012
Glassdoor
Glassdoor: 3.9
WebsiteLinkedInGlassdoor