Cybersecurity Engineer

Localcoin

29d•CA$100,000 - CA$150,000•Hybrid

About The Position

Localcoin, founded in 2017 with headquarters in Toronto, is on a mission to simplify the process and experience of buying or selling digital currencies globally. We envision bringing digital currency to the mainstream financial market through partnerships with leading corporate and franchised retail spaces. With terminals across Canada, Poland and the APAC region, including Australia, Hong Kong, and New Zealand, Localcoin is now the fastest growing Bitcoin ATM operator in the world. At its core, Localcoin believes that everyone should be able to own cryptocurrency and have a deep understanding of blockchain technology. As a member of our rapidly growing team, you'll join a talented, dynamic group of team members who will encourage you to learn, grow, and thrive in your career every step of the way. We are a high-ownership engineering organization focused on building secure, resilient, and scalable systems in a rapidly evolving regulatory and threat landscape. As one of the earliest dedicated security hires, you’ll play a foundational role in shaping our security posture, tooling, and engineering practices across the company.

Requirements

3–5 years of hands-on experience securing AWS and cloud-native infrastructure, including infrastructure hardening, IAM, networking, and cloud security best practices.
Deep understanding of networking, Linux systems, IAM, and infrastructure security principles.
Experience with application security practices and secure software delivery.
Experience managing penetration testing programs and remediation processes.
Experience operating in fintech, cryptocurrency, or other regulated environments.
Strong understanding of modern security threats, attack vectors, and defensive controls.
Ability to write code, automation, or tooling to improve security operations.
Experience working cross-functionally with engineering and infrastructure teams.
Strong incident response and troubleshooting capabilities.
Comfortable operating in high-ownership, fast-moving environments with evolving priorities.

Nice To Haves

Experience implementing or operating SIEM platforms.
Security automation and orchestration experience.
Detection engineering experience.
Experience with SAST/DAST tooling and workflows.
Familiarity with compliance and regulatory frameworks such as FINTRAC, MiCA, DORA, PIPEDA, PCI-DSS, or SOC 2.
Security certifications such as OSCP, CISSP, GIAC, Security+, or cloud security certifications.

Responsibilities

Design, implement, and harden security infrastructure across our AWS-based cloud environment.
Build and improve vulnerability management and reporting processes across infrastructure and applications.
Lead and coordinate security incident response efforts, including investigation, remediation, and postmortem analysis.
Implement and manage SIEM, monitoring, alerting, and detection capabilities
Partner with engineering teams to design and maintain secure systems and development practices.
Develop automation and tooling to improve security operations and reduce manual processes.
Evaluate and strengthen IAM policies, access controls, and cloud security configurations
Support application security initiatives including secure SDLC practices, threat modeling, and testing workflows.
Manage external penetration testing engagements and remediation tracking
Collaborate with vendors, auditors, and compliance stakeholders on security and regulatory initiatives.
Contribute to policies, standards, and operational procedures aligned with evolving regulatory requirements.
Assess the organization’s overall security posture and provide practical recommendations for improvement.