Software Engineer

The Company
Our client is a Toronto-based cybersecurity startup helping companies manage vulnerabilities, secure their devices, and strengthen their overall security posture. Their platform brings security and compliance into one place, giving organizations greater visibility into their risks and helping them take action to address vulnerabilities. The company is growing quickly and is building a modern platform that combines security tooling, data, and AI-powered workflows to help customers better understand and manage their risk.

The Team
Their engineering team builds and runs the entire platform: product features, vulnerability scanners, data ingestion pipelines, AI-powered workflows, and APIs. They're small, Toronto-based, and frequently work together out of their Toronto office. Leadership writes code too, which means the people deciding what to build feel the same day-to-day friction you do, and are motivated to help fix it.

What you'll own

• Real features, end to end. You'll design, build, and iterate across the stack; backend, frontend, and the infrastructure underneath when it needs you. You take a feature from a rough customer need to something running reliably in production.

• The stability of your work. In a cybersecurity product the bar for "done" is higher. You write the technical design, get it reviewed, ship it, and you're on the hook when it's live.

• Outcomes, not tickets. When a customer-impacting problem surfaces, you work directly with customer experience and GRC forward-deployed engineers to solve it; you're trusted to do so without waiting for permission.

• Product judgment. They don't have a layer of people translating requirements into specs for you. You'll put on a product hat, weigh in on direction, research technologies, and make architecture and infra calls that stick.

• AI capabilities. You'll build the AI-powered features, integrations, and infrastructure behind their workflows and real-time risk quantification.

How they actually work

• AI is a force multiplier, not a crutch. They support the use of AI tools. They’re a line item in your developer tooling stipend, not a guilty secret. But they’re a security focused company. When something breaks, "the model wrote it" isn't an answer. You ship code you understand, discuss in review, and can fix in production.

• Real autonomy. You pick your own tools. You take on the important work that bubbles up. You're trusted to make good decisions and deliver without hand-holding or management overhead.

• Small-company reality. No quarter-long planning cycles, or red tape to block you. If you've thrived somewhere small where you had to figure things out and owned what you shipped, this will feel like home.

You'll fit if

• You have roughly 3+ years building web applications and shipping real products.

• You're comfortable across Python and TypeScript

• You're open-minded and curious: you'd rather learn a better approach than defend the one you already know.

• You spot gaps, edge cases, and customer pain points and act on them, instead of waiting to be assigned the next step.

• You've collaborated closely with engineers, product, and design to ship high-quality work iteratively.

• You're in the Toronto / GTA area, legally able to work in Canada, with professional fluency in English.

Tech they use (and will teach you)

• Languages: Python, TypeScript

• Frameworks: Flask, FastAPI, Celery, React, TanStack

• Infra: Google Cloud Platform, Kubernetes

• Data: PostgreSQL, ClickHouse, Redis, RabbitMQ, Turbopuffer