Senior Security Engineer 3 - Infrastructure and Automation

Senior Security Engineer 3 - Infrastructure and Automation

Toronto

PagerDuty empowers teams of all kinds to do the critical work that moves business forward through the PagerDuty Operations Cloud.

PagerDuty is seeking a Senior Security Engineer (Infrastructure & Automation) to join our diverse, customer-focused team! As a Senior Security Engineer, you will be a key contributor leading security initiatives around foundational infrastructure supporting PagerDuty's SaaS offerings. Your primary focus will be on infrastructure security through architecture reviews, threat modeling, and security tool implementations, while leveraging automation to scale security solutions. Since we own and operate what we build, you'll collaborate closely with engineers across many teams to ensure we deliver secure, highly reliable, and scalable solutions to our customers.

This is an exciting opportunity to build lovable security solutions that make developers and customers happy. The ideal candidate believes in securing infrastructure at scale and creating automated solutions that make security the easiest choice.

This role is expected to come into our Toronto office one day per month, so you can thrive in your new role and fully embrace being a Dutonian!

KEY RESPONSIBILITIES

• Lead technical security initiatives by conducting architecture reviews and threat modeling sessions for new and existing services
• Design and implement security controls for cloud infrastructure and containerized environments
• Work closely with Product Engineering teams to review service designs (full stack) and provide security-focused recommendations
• Resolve technical ambiguity in system designs, collaborating with engineering management and staff engineers
• Monitor and maintain security tooling supporting infrastructure security controls
• Design and implement security automations and tool integrations to scale security operations
• Build and maintain security guardrails and automated compliance controls
• Develop automated vulnerability management workflows to drive timely remediation
• Create security relevant alerting and metrics for visibility and reporting
• Implement automated incident response playbooks
• Mentor and guide team members on security best practices and implementation approaches
• Participate in our team's on-call rotation, triaging and addressing security issues as they arise.
• Contribute to roadmap and annual planning discussions

BASIC QUALIFICATIONS

• 5+ years of experience as a full-stack Security Engineer in a AWS native, micro-service SaaS environment
• Strong expertise in cloud security, particularly AWS services including but not limited to:
• GuardDuty, CloudTrail, Secrets Manager
• EKS/ECR, IAM family, Config
• Service Mesh architectures
• Proficiency with security tools:
• Vulnerability Management & EDR: Wiz, Snyk, Qualys/Nessus, Crowdstrike
• SIEM: SumoLogic or Splunk
• Experience with Infrastructure as Code and CI/CD:
• 4+ years of experience and proficiency in at least one programming language and framework (Python, Bash, Ruby on Rails, Elixir, or Java)
• Strong understanding of Threat Modeling principles
• Experience with Security Incident Response & Risk Management
• High appetite for challenging problems with a high degree of ownership.

PREFERRED QUALIFICATIONS

• Current or past experience with obtaining and maintaining FedRAMP authorization
• Experience working at a SaaS company larger than 1000 employees and 100M in revenue
• Strong problem-solving abilities with effective change management skills
• Possesses a strong sense of ownership and a keen discernment for excellence in security systems within a SaaS environment, demonstrating the ability to distinguish what constitutes a truly robust and effective safeguarding infrastructure.
• Demonstrated history of mentoring and coaching
• Experience building Security Orchestration, Automation, and Response (SOAR) playbooks
• Strong written and verbal communication skills
• Working knowledge and experience with PagerDuty Incident Management and Process Automation products.
• Familiarity with Corporate security needs and solutions, and ability to provide oversight and mentorship to the Corporate Security team to ensure alignment with CISO strategic initiatives and mandates.

The base salary range for this position is 139,000 - 207,000 CAD. This role may also be eligible for bonus, commission, equity, and/or benefits.

Our base salary ranges are determined by role, level, and location. The range, which is subject to change based on primary work location, reflects the minimum and maximum base salary we expect to pay newly hired employees for the position. Within the range, we determine pay for an individual based on a number of factors including market location, job-related knowledge, skills/competencies and experience.

Apply anyway! We extend opportunities to a broad array of candidates, including those with diverse workplace experiences and backgrounds. Whether you're new to the corporate world, returning to work after a gap in employment, or simply looking to take the next step in your career path, we are excited to connect with you.

Where we work

PagerDuty currently has offices in Atlanta, Lisbon, London, San Francisco, Santiago, Sydney, Tokyo, and Toronto. We offer a hybrid, flexible workplace. We also provide ample opportunities for in-person and virtual connection, like team offsites and volunteering events.

What we offer

One way we ensure our employees are inspired to do their best is through a comprehensive total rewards approach that supports them and their loved ones. As a global organization, our programs are competitive with industry standards and aligned with local laws and regulations. Learn more, including country-specific offerings, on our benefits site.

Your package may include:

• Comprehensive benefits package from day one
• Generous paid vacation time
• Paid holidays and sick leave
• Dutonian Wellness Days - scheduled company-wide paid days off in addition to PTO
• Company equity*
• ESPP (Employee Stock Purchase Program)*
• Retirement or pension plan*
• Paid parental leave - up to 22 weeks for pregnant parent, up to 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)*
• HibernationDuty - an annual company paid week off when everyone at PagerDuty, with the exception of a small, coverage crew, is asked to take a much needed break to truly disconnect and recharge
• Paid volunteer time off - 20 hours per year
• Mental wellness programs

*Eligibility may vary by role, region, and tenure

About PagerDuty

PagerDuty, Inc. (NYSE:PD) is a global leader in digital operations management. The PagerDuty Operations Cloud revolutionizes how critical work gets done, and powers the agility that drives digital transformation. Customers rely on the PagerDuty Operations Cloud to compress costs, accelerate productivity, win revenue, sustain seamless digital experiences, and earn customer trust. More than half of the Fortune 500 and more than two thirds of the Fortune 100 trust PagerDuty including Cisco, Cox Automotive, DoorDash, Electronic Arts, Genentech, Shopify, Zoom and more.

PagerDuty is Great Place to Work-certified, a Fortune Best Workplace for Millennials, a Fortune Best Medium Workplace, a Fortune Best Workplace in Technology, and a top rated product on TrustRadius and G2.

PagerDuty is committed to creating a diverse environment and is an equal opportunity employer. PagerDuty does not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, parental status, veteran status, or disability status.

PagerDuty is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application process. Should you require accommodation, please email accommodation@pagerduty.com and we will work with you to meet your accessibility needs.