Forward Financing

1 day ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Own the end-to-end technical architecture of a security program spanning AppSec, SecOps, and GRC. Define reference architectures, evaluate and consolidate security tools, and embed security natively across cloud (AWS), identity, CI/CD, endpoints, and SaaS. Architect SIEM/logging and identity governance with automated, versioned controls using infrastructure- and detection-as-code. Mentor engineers and align security design to CIS Controls, ISO 27001, SOC 2, and NIST.

Location: Ontario

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own the end-to-end architecture of the security technology stack across AppSec, SecOps, and GRC, ensuring it works with Engineering, IT, and Infrastructure.
•Set technical direction for evaluating, integrating, standardizing, and retiring security tools, including reference architectures and standards.
•Provide shared technical foundation across AppSec, SecOps, and GRC by supporting secure testing, reliable detection data, and control evidence for compliance.
•Partner with Engineering, IT, and Infrastructure to build security into shared platforms across cloud, identity, CI/CD, endpoints, and SaaS.
•Architect SIEM/logging and identity governance (role-based access control) and use infrastructure-as-code and detection-as-code for automated, repeatable controls.

Pay and Benefits

Salary: CAD 160,000 - 200,000 annually

Perks:Health InsuranceDentalVisionPaid ParentalRrsp MatchWellness StipendVolunteering DaysLearning Budget

Key Requirements

•Typically 7+ years in security engineering, security architecture, detection engineering, or security operations, including designing systems across multiple security domains.
•Experience owning or heavily shaping the architecture of a security technology stack (platforms, data, and controls), not just operating a single tool.
•Deep, hands-on cloud security expertise with AWS (GCP/Azure a plus), including IAM, network architecture, and infrastructure log analysis.
•Track record integrating security tooling and controls into broader Engineering/IT ecosystems (CI/CD, identity, endpoints, SaaS).
•Experience with infrastructure-as-code and/or detection-as-code (e.g., Terraform and CI/CD pipelines for security configuration and detection logic).

Experience:7+ years

Education:Bachelor's in Computer Science, Physics

Skills:MentoringCommunicationRisk communicationEngineering practicesArchitecting systems

Tech Stack:AWSGCPAzureCI/CDIAMVPCTerraformKubernetesSIEMSplunkChroniclePantherGuardDutyCloudTrailWAFInfrastructure-as-codeDetection-as-code

Company Brief

Forward Financing

Forward Financing is a Boston-based fintech lender that provides fast, flexible revenue-based working capital to small businesses nationwide, using proprietary underwriting and capital markets facilities to deliver timely funding solutions.

Industry: Lending

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Private Equity Backed

Headquarters: Boston, United States

Founded: 2012

Glassdoor: 4.7

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Forward Financing

1 day ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: Ontario

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own the end-to-end architecture of the security technology stack across AppSec, SecOps, and GRC, ensuring it works with Engineering, IT, and Infrastructure.
•Set technical direction for evaluating, integrating, standardizing, and retiring security tools, including reference architectures and standards.
•Provide shared technical foundation across AppSec, SecOps, and GRC by supporting secure testing, reliable detection data, and control evidence for compliance.
•Partner with Engineering, IT, and Infrastructure to build security into shared platforms across cloud, identity, CI/CD, endpoints, and SaaS.
•Architect SIEM/logging and identity governance (role-based access control) and use infrastructure-as-code and detection-as-code for automated, repeatable controls.

Pay and Benefits

Salary: CAD 160,000 - 200,000 annually

Perks:Health InsuranceDentalVisionPaid ParentalRrsp MatchWellness StipendVolunteering DaysLearning Budget

Key Requirements

•Typically 7+ years in security engineering, security architecture, detection engineering, or security operations, including designing systems across multiple security domains.
•Experience owning or heavily shaping the architecture of a security technology stack (platforms, data, and controls), not just operating a single tool.
•Deep, hands-on cloud security expertise with AWS (GCP/Azure a plus), including IAM, network architecture, and infrastructure log analysis.
•Track record integrating security tooling and controls into broader Engineering/IT ecosystems (CI/CD, identity, endpoints, SaaS).
•Experience with infrastructure-as-code and/or detection-as-code (e.g., Terraform and CI/CD pipelines for security configuration and detection logic).

Experience:7+ years

Education:Bachelor's in Computer Science, Physics

Skills:MentoringCommunicationRisk communicationEngineering practicesArchitecting systems

Tech Stack:AWSGCPAzureCI/CDIAMVPCTerraformKubernetesSIEMSplunkChroniclePantherGuardDutyCloudTrailWAFInfrastructure-as-codeDetection-as-code

Company Brief

Forward Financing

Industry: Lending

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Private Equity Backed

Headquarters: Boston, United States

Founded: 2012

Glassdoor: 4.7

Website LinkedIn Glassdoor