As of November 7, 2026, Jobsy lists 12 product security engineer jobs in Canada. The most active employers are Affirm, AlphaSense and Asana. Skills often requested: python, communication skills, ci/cd and regulatory compliance.
No matching filters. Try another name.
PheedLoop / NordSpace
3+ YOECandidates need 3+ years in offensive security, red teaming or penetration testing, with hands-on engagements they can discuss in depth. They need strong web, API and cloud security knowledge, scripting skills in Python or Bash, and the ability to write clear reports for engineers and leadership.
Python, Bash, Django, React, AWS
Affirm: Affirm only uses legitimate company email address domains (either “@affirm.com” or "@us.greenhouse-mail.io”) to communicate with candidates via email.
2+ YOECandidates need at least two years of software engineering experience, with strong Python or similar backend skills, API and debugging knowledge, and comfort operating production systems. Familiarity with cloud environments, CI/CD, IAM concepts and clear written communication are also expected.
SailPoint, Auth0, GitHub, Terraform, AWS
Affirm: Affirm only uses legitimate company email address domains (either “@affirm.com” or "@us.greenhouse-mail.io”) to communicate with candidates via email.
4+ YOECandidates need 4+ years in application or security engineering, penetration testing, or vulnerability management. They should code in Python, JavaScript/TypeScript, or Kotlin, use Git and GitHub, and understand OWASP Top 10 risks.
GitHub, Git, Burp Suite
Randstad Canada
5+ YOECandidates need a bachelor's degree in computer science, software or computer engineering, or a related field, plus at least 5 years in systems cybersecurity. They need strong knowledge of networks, firewalls, intrusion prevention, Windows and Linux, and strong communication and leadership skills.
Cisco, Netgear, Windows, Linux, firewalls, intrusion prevention systems
Snyk
5+ YOECandidates need 5-8 years running or securing cloud infrastructure, with deep hands-on GCP experience and working AWS knowledge. Snyk also requires strong GCP IAM and GKE skills, infrastructure as code experience, and confidence using AI coding agents.
Terraform, Kubernetes, GKE, Claude Code, Artifact Registry, Binary Authorization
Coinbase
3+ YOECandidates need 3+ years in application security, penetration testing or offensive security, plus hands-on experience with LLMs and red teaming AI systems. They must know OWASP Top 10 and SANS Top 25 and write production-grade tooling in Python, Go or similar.
LLMs, frontier AI models
Asana
5+ YOECandidates need 5+ years in application or product security or security-focused software engineering. They need strong programming skills, knowledge of web vulnerabilities and OWASP Top 10, and experience with security testing tools and threat modeling.
SAST tools, DAST tools, SCA tools
AlphaSense
5+ YOECandidates need 5 to 7+ years in product, application or cloud security engineering. They need secure SDLC and threat modeling skills, experience securing AI/ML pipelines, and familiarity with encryption, cloud security and OAuth, OIDC, SAML, RBAC and ABAC.
Kubernetes, CI/CD pipelines
BeyondTrust
4+ YOECandidates need 4+ years in application security, product security, DevSecOps or security engineering, including hands-on work with security tools in CI/CD pipelines. BeyondTrust also expects experience with GitHub-integrated scanning tools, AI-powered code analysis platforms, scripting and policy-as-code.
GitHub Advanced Security, CodeQL, Dependabot, Wiz CLI, Claude Code Security, Codex Security
Doppel
5+ YOECandidates need 5 to 7 years in product security, cloud security or software development, with GCP and Python skills. They should have experience with threat modeling, pen test coordination and least-privilege IAM, and the ability to explain risk to engineers and leaders.
Google Cloud Platform, Python, Infrastructure as Code, ASPM platform, CI/CD pipeline
LanceDB
8+ YOECandidates need 8+ years as a software engineer, with significant appsec experience, large-scale data platform work, and coding in Rust and/or C++. They must have been the primary engineer building encryption, authentication or authorization features in shipped products, and show ownership of ambiguous projects.
ML, Communication skills
Cohere: Cohere is the leading security-first enterprise AI company.
Candidates need strong software engineering skills and proficiency in Python, Go, or TypeScript. They should have led security reviews of complex production systems and understand vulnerability classes, cloud and web architecture, and how to influence teams without formal authority.
Kubernetes, CI/CD systems, SAST tools, DAST tools, SCA tools
Affirm (2), AlphaSense (1), Asana (1), BeyondTrust (1) and Cohere (1).
Postings most often mention python, communication skills, ci/cd, regulatory compliance, supply chain management, documentation, penetration testing and aws.
11 companies