Software Engineer, Information Security

Lutra • Toronto, ON

7d

About The Position

Our client is building an AI-native security and compliance platform that helps growing businesses achieve enterprise-grade security without assembling large internal teams. Their product and team of security experts work in tandem to automate the documentation, controls implementation, evidence collection, infrastructure management, and audit preparation required to help companies stay ready to do business in a rapidly evolving regulatory environment.

The company’s current commercial focus is end-to-end CMMC certification for organizations working within the NATO defence supply chain. The platform helps customers define their compliance boundaries, build required documentation, implement and monitor security controls, manage secure infrastructure, and coordinate third-party audits. It also supports a broader set of frameworks spanning SOC 2, ISO 27001, FedRAMP, HIPAA, GDPR, and Canadian privacy and cybersecurity standards.

Founded in 2024, the company has raised approximately $4.7 million USD in venture capital and signed more than 50 customers within its first 6 months outside of stealth. The founders bring deep experience across cybersecurity, application security, infrastructure, product design, and scaling venture-backed SaaS companies. As of June 2026, the company has approximately 23 team members and expects to grow to around 30 by the end of the year.

You’ll join a flat engineering organization of seven software engineers working closely with product managers, designers, security experts, and customer-facing implementation teams. The engineering team has operated in its current form for approximately 18 months without attrition. This is a growth hire driven by an expanding product roadmap, new market opportunities, and a growing customer base. Engineering teams are dynamically assembled to intentionally avoid rigid functional silos and most members of the team have worked throughout the codebase and move between projects based on business priorities, available capacity, and individual strengths.

The team is AI-forward and leans heavily on code generation tools, but humans review every pull request. Team members receive a monthly allowance for AI development tools and can choose the models, coding environments, and workflows that make them most effective. They deploy 3-4 times per day, have high confidence in their test suite, and adjust their process to reflect the risk and maturity of the work, allowing the team to move quickly on prototypes without treating production-critical systems casually.

Requirements

• You have 2+ years of experience in full-stack web development, with a strong track record shipping customer-facing product
• You have experience designing APIs, modelling data, working with relational databases, and at least one modern frontend framework
• You have a track record of owning projects or substantial features from an initially ambiguous problem through production delivery
• You are comfortable navigating an evolving codebase, learning unfamiliar product areas, and moving between projects as priorities change
• You bring intellectual honesty to your work and have the confidence to voice concerns, challenge assumptions, and receive feedback
• You are an experienced, opinionated advocate for AI-augmented development and have a strong grasp of at least one contemporary tool (Claude Code, Augment Code, OpenCode, Cursor, etc) and where human judgment remains essential
• You have a contagious growth mindset and persistently seek opportunities to improve yourself, the team, products and processes in a scaling business
• You have an excellent command of English

Nice To Haves

• You have built workflow-heavy software used by operational, security, compliance, or professional-services teams
• You have experience building software for regulated, security-sensitive, or enterprise environments
• You have experience scaling an B2B SaaS venture

Responsibilities

• End-to-end software development: Own product capabilities from technical discovery and design through implementation, testing, release, and production support
• Full-stack engineering: Build and improve customer-facing and internal workflows across a Python/Flask/FastAPI backend and TypeScript/React frontend
• AI-first execution and advocacy: Build, debug, test, and document with AI in the loop by default and thoughtfully champion AI-augmented engineering practices
• Cross-functional collaboration: Partner tightly with product, design, and engineering leadership in planning, refinement, and delivery; adapting team rituals and ways of working to align with emergent best practices surrounding AI-augmented development
• Performance & reliability engineering: Resolve defects, diligently pay-down technical debt, and improve the reliability of an increasingly busy production platform
• Adaptability & innovation: Keeping abreast of emerging technologies and industry trends; experimenting with new tools and approaches to ensure that the team’s technology choices remain efficient, current, and well-suited to the mission and customer needs

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed