Lead Security Engineer

About this role

Lead Canary Technologies’ security function, managing a small team while owning security and compliance across its hospitality platform. The role combines hands-on technical security work with audit leadership and communication with customers, partners, and executives.

About the company

Canary Technologies provides hospitality software for hotels, covering guest messaging, digital check-in, and property operations.

The team

Security team within the Platform organization

What you'll do

• Lead, coach, and grow the Security team
• Own the security and compliance program, including audits, controls, policies, and risk posture
• Serve as the primary security contact for customers, partners, and auditors
• Manage vendor and third-party risk
• Set security tooling direction and review architecture and threat models
• Communicate security policies and run awareness and training

What we're looking for

• 8+ years of security engineering experience, including 2+ years leading a team
• End-to-end ownership of compliance programs such as SOC 2 Type II, PCI DSS, or ISO 27001
• Hands-on experience with AWS security, identity and access management, application security, and vulnerability management
• Strong written and verbal communication skills
• Experience with vendor risk management and reviewing security contract terms
• Experience building pragmatic, risk-based security programs at a growth-stage SaaS company

Nice to have

• Hospitality, fintech, or payments industry experience
• CISSP, CISM, or CISA certification

Benefits

• Unlimited PTO
• Company holidays and monthly Canary Days
• Birthday holiday
• Travel stipend for visits to company hubs
• Canary hotel stay credit and discounts at select partner hotels
• Self-improvement and professional development stipends
• Referral bonus