Senior Security Engineer - Later, Toronto

AI Summary

Later, a leading influencer marketing company, is seeking a Senior Security Engineer in Toronto, Ontario. This role focuses on strengthening the company's security posture across applications, infrastructure, and corporate systems through hands-on engineering and compliance enablement. Key duties include defining scalable security standards and building internal security tools. Candidates need 5-7+ years of security or software engineering experience with a strong security focus and expertise in various security domains.

Role Overview & Strategic Impact

As a Senior Security Engineer at Later, you will play a pivotal role in enhancing the company's overall security posture. This involves a blend of deep security expertise and strong software engineering skills, with a particular focus on application security, cloud and infrastructure security, and secure development practices. You will be instrumental in defining and implementing scalable security standards, best practices, and guardrails that support SOC 2 readiness through practical, automated, and auditable solutions. This position requires close collaboration with various teams across Engineering, Infrastructure, Product, IT, Legal, People, Finance, and other business functions to embed robust security into Later's systems, tools, workflows, and operating practices. A core aspect of this role is helping Later mature its security capabilities, ensuring compliance expectations are met through effective controls and clear guidance that works across the entire company.

Technical Responsibilities & Collaboration

This role demands significant technical execution, including building and maintaining internal security tools, automation, and services that support secure development, compliance workflows, vulnerability management, and corporate security operations. You will design and implement critical security controls within CI/CD pipelines, covering secure build and deploy patterns, security scanning, dependency management, container scanning, and secret management. Furthermore, you will support application security efforts through secure design reviews, threat modelling, code review guidance, and API security. Improving cloud infrastructure and corporate systems security through hardening, monitoring, and configuration review is also a key responsibility. Collaboration is central to success; you will partner with technical and business teams to identify vulnerabilities, explain their impact clearly, and drive effective remediation. Your work will strengthen security observability and response readiness through enhanced logging, alerting, detection engineering, and incident response improvements, fostering company-wide security process maturity. Providing pragmatic security guidance on designs, implementations, and vendor tools is crucial for embedding security without hindering team progress.

What Later Offers & Success Factors

Later is committed to building an inclusive and supportive environment where you can do your best work. This Senior Security Engineer role offers a competitive salary range of $145,000 - $175,000, along with comprehensive benefits. Success in this role within the first 90 days involves completing a security posture assessment, identifying high-priority gaps, and socialising a remediation roadmap with key stakeholders across Engineering, IT, and Leadership. By six months, core SOC 2 controls should be documented and automated, with reliable evidence collection. Security will be deeply embedded into Later's CI/CD pipelines, and teams across the business will have a clear point of contact for security questions, understanding the risk landscape and receiving guidance that enables faster, more secure operations. Later's security observability will be materially improved, with robust logging, alerting, and detection coverage, alongside a documented and practised incident response process. Your ability to translate complex security concepts into clear, actionable guidance for both technical and non-technical audiences will be vital for driving security improvements across all teams.