Security Engineer

Canals builds software for wholesale distributors, helping them operate more efficiently through automation and AI.

Our customers are the companies responsible for moving the materials that power the real economy; electrical supplies, plumbing products, roofing materials, HVAC equipment, and more. Every day, thousands of people rely on Canals to help process orders, manage purchasing, handle accounts payable, and streamline critical business workflows.

We're a profitable, rapidly growing company with a team of roughly 100 people distributed across North and South America. We care deeply about building great products, hiring exceptional people, and creating an environment where talented individuals can do the best work of their careers.

Our customer base is growing rapidly. As more customers onboard and existing customers scale, the security surface of our platform grows with it. We’re looking for a senior security engineer who can move quickly, think system-wide, and raise the security bar across our product and infrastructure.

This role is about owning security outcomes, not just finding issues. You’ll identify the where there's risk and lead remediation. You’ll have the autonomy to shape our security strategy while staying deeply hands-on with the systems that matter most.

What You’ll Do

• Identify the highest-impact security risks and lead remediation end-to-end.

• Own application security tooling for code, dependencies, and secrets.

• Lead threat modeling, risk assessments, and architecture reviews for new and existing services.

• Validate and triage findings from bug bounties and pentests.

• Lead security monitoring and incident response: alerts, investigations, and follow-through.

• Strong security engineering background with hands-on experience securing production systems.

• Ability to drive remediation across teams with clear priorities and follow-up.

• Comfort taking ownership of deliverables and ensuring projects are delivered to a high standard.

• Strong communication skills and comfort working remotely in a fast-moving, product-focused environment.

• Experience integrating security into CI/CD and infrastructure-as-code workflows.

• Previous experience in high-growth startups or small teams is a plus.