HHiring Reality
← Forma.ai

Senior Security Engineer

Forma.ai
Location
Toronto, Canada
Posted
1 month ago
Department
Engineering
What they actually want (must-haves)
  • Eight or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
  • Strong hands-on experience securing AWS environments, including IAM, networking, encryption, logging, and secrets management.
  • Experience with Terraform, Kubernetes, containers, and security controls in CI/CD pipelines.
  • Strong understanding of application and API security, authentication, authorization, and multi-tenant SaaS risks.
  • Experience with vulnerability management, threat modelling, incident response, and security automation.
  • Ability to write scripts using Python, Bash, PowerShell, or a similar language.
Nice to have
  • Experience supporting SOC 2, ISO 27001, privacy programs, or enterprise customer security reviews.
  • Experience securing analytics platforms, data pipelines, or systems handling sensitive customer data, including row-level, column-level, or attribute-based access controls.
  • Experience with AWS security services, EKS, Datadog, Wiz, Snyk, CrowdStrike, or similar tools.
  • Experience securing AI applications, large language models, agents, or Amazon Bedrock workloads.
  • Experience in a B2B SaaS or high-growth technology company.
What the job really is

As a Staff Security Engineer at Forma.ai, you will lead efforts to enhance security across the company's applications, cloud infrastructure, and development processes. Your role involves collaborating with various teams to implement security controls, automate processes, and ensure secure software delivery. You will also be responsible for incident response, vulnerability management, and improving security visibility across the organization.

Benefits
  • Meaningful compensation including participation in an employee stock ownership plan.
  • Full benefits package including medical, dental, vision, disability and life insurance, and paid parental leave.
  • $750 yearly training stipend for learning and development resources.
  • Opportunities for career growth as an individual contributor or people leader.
Things to weigh
  • No salary listed in the posting.
  • The role involves a significant amount of collaboration across multiple departments, which may require strong interpersonal skills.
  • The position may evolve into a dedicated security team role, indicating potential changes in responsibilities over time.
Job score2.6/5
Benefits2/5
Freshness1/5
Career value5/5
Role clarity5/5
Pay transparency0/5

Applying to Forma.ai?

See how your résumé matches this role — and tailor it from what actually gets interviews.