Companies Canarytechnologies Senior Application Security Engineer

About the role

Canarytechnologies · Remote
About Us
Canary Technologies is changing the game for hotels with modern software powered by Canary's hospitality-specific AI platform.
 
Canary is utilized by 20,000+ hoteliers in 100+ countries to equip hoteliers with the technology they need to work smarter and wow their guests. Major hotel brands such as Wyndham, Marriott, IHG, Four Seasons, Rosewood, and Best Western trust Canary to deliver results.
 
Canary was named a 2024 Deloitte Technology Fast 500™ company, a Most Innovative Company by Fast Company and a HotelTechReport Best Place to Work — and is backed by top Silicon Valley investors like Y Combinator, F-Prime, Brighton Park Capital and Insight Partners.
 
Join us in shaping the future of hospitality!
 

About the Role
Our team is growing and we're hiring a Senior Application Security Engineer to join our engineering team and enable our next phase of growth. Canary's engineering team is fully remote!
 
This role focuses on embedding security into the software development lifecycle (SDLC) and partnering with developers to make secure design the default. You will own the strategy for application security tooling, automation, and developer enablement while collaborating closely with SREs, infra, and data engineers to keep our platform both secure and scalable.

Responsibilities

  • Define and enforce best practices for secure coding, dependency management, and design reviews across engineering teams.
  • Integrate and manage SAST, DAST, and SCA tools within CI/CD pipelines (e.g., GitHub Actions).
  • Partner with developers on new features and systems to identify risks early in the lifecycle.
  • Implement best practices for secrets handling, API authentication/authorization, and data protection.
  • Build security guidelines, training, and reusable libraries/patterns so that teams can ship secure code faster.
  • Triage and prioritize findings from bug bounties, penetration tests, and automated scans, ensuring timely resolution.
  • Act as the bridge between application developers and platform engineers to align app security with infra and compliance requirements.
  • Implement monitoring, alerting, and remediation for security incidents across our platform.
  • Scan and remediate vulnerabilities in container images, OS packages, dependencies, and IaC templates.
  • Design and maintain least-privilege IAM roles, secrets management, and authentication flows.
  • Automate evidence gathering and control enforcement for SOC 2, ISO 27001, and others.
  • Qualifications

  • 6+ years in security engineering, DevSecOps, or related roles, including experience at scale.
  • Excellent communication and teamwork abilities.
  • Strong experience integrating security into modern SDLC pipelines.
  • Hands-on with AppSec tooling (Snyk, OWASP ZAP, Burp Suite, SonarQube, Checkmarx, etc.).
  • Solid understanding of web app security (OWASP Top 10, API security, auth flows, input validation).
  • Familiarity with AWS/Kubernetes security.
  • Strong programming skills (Python, Go, or JavaScript) to build tools, write secure code, and contribute to developer libraries.
  • Proven track record in partnering with product and engineering teams to drive security adoption without slowing down velocity.
  • Strong AWS security skills (IAM, KMS, Security Hub, GuardDuty, WAF).
  • Experience with Kubernetes security (RBAC, OPA/Gatekeeper, network policies).
  • Hands-on with Terraform, Helm, and GitOps practices.
  • Familiarity with security tooling (Trivy, Falco, Snyk, Aqua).
  • Knowledge of networking, encryption, and cloud-native security best practices.

  • We also work hard to ensure Canary is a fun and exciting place to work! Here are some of the additional benefits:
     
    Canary Days:  As a company we want to ensure that the team has time to recharge. Each month we provide company wide days off to ensure there is at least one extended weekend or day off.
     
    Self Improvement Club: We meet each month and share our personal goals for the month. Each individual is provided a budget towards any purchases that help us achieve these goals.
     
    Professional Development Chats: We provide budget to help drive cross functional professional development conversations across the organization.
     
    Travel Reimbursement: Team members are able to visit our offices across New York, San Francisco or Dallas when they choose, and are provided a travel stipend for doing so.  Spend time working with the team in their office, and use the rest of your time exploring a new city!
     
    Personal Travel Reimbursement: If you stay at a hotel that Canary works with, we provide a credit towards your stay.
     
    Canary Technologies is an equal opportunity employer. We recruit, employ, train, compensate and promote talent regardless of race, religion, ethnicity, national origin, citizenship, gender, gender identity, sexual orientation, age, veteran status, disability, genetic information or any other protected characteristic.
     
    Ready to apply to Canarytechnologies?
    Apply to Canarytechnologies

    Similar jobs

    Temporal Technologies
    Senior Application Security Engineer
    Temporal Technologies
    ⚡ Apply early United States - Remote Opportu... · location restricted $180,000–$225,000
    ● New 👁 Seen ✓ Applied 5h ago
    Databricks
    Sr. Staff Product Security Engineer
    Databricks
    ⚡ Apply early United States Onsite $228,600–$314,250
    ● New 👁 Seen ✓ Applied 7h ago
    BitGo
    Security Application Engineer
    BitGo
    ⚡ Apply early San Francisco, California, Uni... Onsite $200,000–$245,000
    ● New 👁 Seen ✓ Applied 8h ago
    BitGo
    Security Application Engineer
    BitGo
    ⚡ Apply early Palo Alto, California, United... Onsite $200,000–$245,000
    ● New 👁 Seen ✓ Applied 8h ago
    DigitalOcean
    Senior Product Security Engineer, Secure Design (Kernel and Virtualization)
    DigitalOcean
    ⚡ Apply early United States Onsite $175,000–$190,000
    ● New 👁 Seen ✓ Applied 13h ago
    IH
    Principal Application Security Engineer
    iHerb
    ⚡ Apply early United States of America - Rem... · location restricted $177,000–$225,000
    ● New 👁 Seen ✓ Applied 13h ago
    LVT
    Application Security Engineer
    LVT
    ⚡ Apply early American Fork, Utah, United St... Onsite
    ● New 👁 Seen ✓ Applied 15h ago
    Anduril Industries
    Senior Product Security Engineer (Active Clearance)
    Anduril Industries
    ⚡ Apply early Costa Mesa, California, United... Onsite $146,000–$194,000
    ● New 👁 Seen ✓ Applied 19h ago
    Anduril Industries
    Senior Product Security Engineer
    Anduril Industries
    ⚡ Apply early Fort Collins, Colorado, United... Onsite $144,000–$191,000
    ● New 👁 Seen ✓ Applied 19h ago

    Sign up for suggestions tailored to the jobs you open and the searches you save.

    Apply now
    🤖

    Whoa — hold up

    JobsRadar was built for real people having a rough time in their job search — not for automated requests. You're clicking way too fast and you're now temporarily blocked.

    Come back later. If you're genuinely job hunting, we've got your back — just act like a human.

    Catch your next role the second it’s posted.

    Create a free account and we’ll watch the boards for you — the instant a job matches your search, it lands in your inbox or Telegram. No digging, no refreshing.

    Create free account

    Free forever · takes 30 seconds · already have one?

    Get the worldwide-remote edge.

    Join our Telegram channel for the stuff that helps you land the role — salary benchmarks, the weekly market pulse, and new-feature drops. No spam, just signal.

    Join the channel — it's free