Senior Software Engineer, Security
At its midpoint, $163k/yr, this role pays less than the $205k/yr midpoint for Application & Product Security openings today (usual band $169k–$341k/yr).
The full posting
About Super.com
We started Super.com to help maximize lives–both the lives of our customers and the lives of our employees– so that everyone can experience all that life has to offer. For our employees, our promise is that Super.com is more than just a job; it’s an opportunity to unlock one’s potential, where learning is celebrated and impact is realized.
We are more than a fast-paced, high-growth tech company ; we care about our people and take career progression seriously. This is your career and our aim is to supercharge it through the people, the work, and the programs that fuel who we are.
About the role
As a Senior Software Engineer on our Security team, you'll help shape the direction of our security tooling and AppSec practices and lead high-impact security work across the company. Your work spans offense and defense: hardening how our products are designed and built, breaking them to surface what matters, and building the tooling and AI that let engineers move fast without creating risk.
You'll report to our Staff Software Engineer - Security and work closely with product engineers, DevOps, and Fraud. Expect high autonomy, frequent collaboration, a fast pace, and reliance on your own initiative. You'll take security initiatives end-to-end, mentor other engineers, and raise the bar for security practices across engineering.
What you’ll be working on
- Help shape the technical direction of our security tooling and AppSec practices
- Lead secure design across major engineering projects, from threat modeling through architecture
- Design and evolve our DevSecOps architecture, deciding how security is embedded across the SDLC
- Build and extend the in-house security tooling and find new and innovative ways to identify and remediate issues
- Identify and implement new ways to use AI to automate and scale our security work
- Perform advanced offensive security work, chaining vulnerabilities and building proofs of concept that demonstrate real business impact
- Enable developers to write more secure code and ship security work faster via training and AI-powered tooling
- Mentor and develop engineers on the team, and set the bar for what good security work looks like
What we’re looking for
- 5+ years working in security (AppSec, DevSecOps, offensive security, or similar)
- Professional offensive security experience, with a proven ability to find, chain, and exploit complex vulnerabilities in applications and infrastructure
- Track record of leading security initiatives and mentoring or developing other engineers
- Experience leading threat modeling and secure design across engineering projects
- Experience designing and embedding security across CI/CD pipelines and the SDLC
- Hands-on cloud infrastructure or cloud security experience (AWS, Kubernetes)
- Comfortable writing and maintaining code (Python preferred)
- Strong communicator who can influence and drive security work across engineering, DevOps, and leadership
Our Technology
- Services are authored as K8s-based microservices powered by Python FastAPI backends and Typescript React front-end code.
- Apps are built upon Postgres, Redis, Kafka, Elasticsearch, and Snowflake.
- Our infrastructure runs on AWS and leverages hosted infrastructure technologies such as EKS, MSK, Elasticache, and RDS. We use Istio for service mesh, Helm, TF and Crossplane for IAC, and Kyverno for policy-as-code enforcement.
- Vulnerabilities are managed through in-house, AI-native custom tooling that you'll contribute to. We orchestrate open-source tools through this custom platform.
- Security and application logs/metrics/events are managed through Datadog
- Our security stack is currently evolving as we select and quickly roll out new tools. You'll play a key role in the selection and deployment of these.
- As an AI-First engineering organization, we leverage modern AI development workflows using tools such as Cursor, Claude, and internally built AI agents to accelerate implementation and iteration across our codebases. You'll own and advance our AI infrastructure in this role.
Bonus points for
- Relevant security certifications (e.g., Burp Suite Certified Practitioner, KCSA, AWS SCS, or similar)
- Professional software development experience
- Published security research, CVEs, or conference talks
- Experience applying AI/LLMs to security or engineering workflows
- Open-source security tool development or contributions
- Mobile development or mobile security experience
We’ve got you covered
At Super.com , we believe in supporting our team so they can thrive - both at work and in life.
- Remote-First Flexibility : Work from anywhere in the world and choose the hours that suit you best. We trust you to get great work done on your terms.
- Time to Recharge : Enjoy unlimited PTO, company-wide recharge days, and annual team offsites.
- Everyday Perks : Weekly UberEats credits and travel discounts on Super.com help you enjoy the little things.
- Family-Friendly Benefits : We support growing families with generous parental leave and a flexible return-to-work plan.
- Comprehensive Compensation : Competitive salary, equity options, and top-tier benefits starting on day one.
- Investing in You : Access to wellness budgets, personal development funds, and team-level learning resources.
At Super.com , we are proud to leverage cutting-edge artificial intelligence (AI) technology to make our hiring process smarter, faster, and more inclusive. By integrating AI tools into our recruitment, we enhance our ability to identify top talent efficiently while promoting fairness and consistency for every applicant.
Super.com is an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Accommodations are available on request for candidates taking part in all aspects of the selection process. If needed, please notify your Talent Acquisition Partner.
Where you can be based
This position is 100% remote and open to applicants based in Canada.
Text as Super.com published it; last compared with the original on 14 Nov 2026.
The application
Your details, CV and LinkedIn, then 10 questions (4 written).
- 1.OtherShort answer · optional
- 2.Do you currently hold citizenship status, a valid open work permit, open work visa, or permanent residency that allows you to work for any employer in Canada or the US for at least the next 12 months? I.e. PNP Express Entry, F-1 OPT, STEM OYes or no
- 3.Do you currently or will you in the future require sponsorship to work in the US or Canada?Yes or no
- 4.What City and Province/State are you located in within Canada/US?Short answer
- 5.What are your compensation expectations for this role? (Please provide a range)Choose one (12 choices)
- 6.Briefly describe your hands on offensive security experience. What types of vulnerabilities have you identified or exploited, and what was your role in the work?Written answer · optional
- 7.Where do you find AI most useful in security work?Written answer · optional
- 8.Tell us briefly about a security tool, automation, or platform you’ve personally built or significantly contributed code to. What did you build, what technologies did you use, and what problem did it solve?Written answer · optional
- 9.Please describe your hands-on cloud and cloud security experience, including the environments and technologies you’ve worked with (eg. AWS, Kubernetes, Terraform).Written answer · optional
- 10.Do you self-identify as a person with a disability?Choose one: Yes · No · Prefer not to disclose · optional
Taken from Super.com's application form as it stood on 14 Nov 2026.
The employer: Super.com
Super.com runs a savings app for travel and shopping; it is hiring a Head of Security and a security engineer, both remote in Canada.
Pay and benefits: Remote salaried positions within Canada, including leadership of the security function.
Other security roles worth a look
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.
$160,000–$225,000/yr
$120,000–$220,000/yr
$110,000–$170,000/yr
Information Security Lead (shows the role here)
Mama Money · AppSec · Remote· 4d agoDetails
Information Security Analyst Expert (shows the role here)
AfterQuery · SecOps & IR · Remote· 2mo agoDetails
$113/hr
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Super.com posts a security role
We read Super.com's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.