Homebase

Homebase

Staff Security Engineer, Application Security

Toronto · Staff+

Sponsorship not specifiedDetected 147 days ago
PythonRubyReactAWSCI/CDMachine LearningLLMsCybersecuritySOC OperationsRecruitingTest AutomationLeadershipCommunicationCollaborationMentoring

About the role

  • At Homebase, you'll join a team that's bold, fast-moving, and obsessed with helping small businesses thrive.
  • This is a technical leadership role at the E5 level-you'll define the multi-quarter strategy for how we secure our products, set architectural direction, and pioneer new capabilities that keep pace with our rapid growth.
  • Homebase's product suite spans scheduling, payroll, time tracking, HR, team communication, and a growing ecosystem of AI-powered features.

Responsibilities

  • Evaluate emerging security technologies and make build-versus-buy decisions that shape the security platform.
  • Drive security and product trade-off decisions at the architectural level, balancing protection with velocity.
  • Lead threat modeling and security architecture reviews for AI-powered features, model training pipelines, and LLM integrations.
  • Design and implement security controls specific to AI/ML systems, including prompt injection defenses, model input validation, output filtering, and data pipeline integrity.
  • Create AI-powered vulnerability detection and security automation that multiplies the team's effectiveness.
  • Partner with AI engineering teams to establish secure development patterns for model deployment and inference infrastructure.
  • Build and maintain security tooling and automation that integrates seamlessly into CI/CD pipelines, enabling continuous security validation at scale.
  • We build with empathy, act with urgency, and take big swings that drive real-world impact.
  • Here, every Homie shows up to raise the bar, support one another, and celebrate wins as a team.
  • We're not just building an app-we're building unstoppable teams.

Requirements

  • Experience designing and implementing modern vulnerability management systems and embedding security tooling within CI/CD pipelines.
  • Exceptional ability to evaluate security trade-offs, make pragmatic risk-informed decisions, and communicate them clearly to technical and non-technical stakeholders.
  • Demonstrated curiosity about emerging AI capabilities, with a track record of leveraging new tools to enhance security operations and productivity.

Nice to have

  • Experience defining application security strategy and maturity roadmaps for a high-growth, product-driven company.
  • Speaking experience at security conferences, meetups, or community events.
  • Experience with threat modeling frameworks adapted for AI/ML systems.
  • 💡 Be Customer Obsessed - Solve problems with empathy and creativity.
  • ⚡ Move Fast, Learn Fast - Experiment, take action, and grow every day.
  • 🏆 Master Your Craft - Excellence fuels impact-show up, step up, and make your mark.

Skills

  • Pioneer a security partnership program, mentoring engineers across the organization, and driving a culture of shared security ownership.
  • Curate and author security guidance, patterns, and training content that raises the security bar organization-wide.
  • Influence security decisions at the department and company level; shape how Homebase invests in security capabilities.
  • Hands-on experience securing AI-native applications, including LLM integrations, model pipelines, or ML infrastructure.
  • Strong expertise in web application security, cloud-native security (AWS), and modern DevSecOps practices.
  • Meet the Hiring Manager, Ali F. https://www.linkedin.com/in/alifirooz/
  • Participate in Technical Interviews
  • Background Check + Offer Stage
  • Welcome to the team, Homie 🎉

Benefits

  • 💰 Ownership & Savings: Stock options + TFSA/RRSP with 4% company match
  • 🏥 Health & Wellness: Comprehensive medical, dental, and vision for you and your dependents
  • ⏰ Time Flexibility: Flex time off + company holidays + designated focus periods
  • 👶 Family Support: Maternity/Parental Leave EI top-up support offered (after 6 months of service)
  • 🛡️ Protection Plans: Life insurance + short/long-term disability coverage
  • 🍽️ Workspace Perks: Meals provided, team offsites, and Customer Days

Company info

  • We're looking for a hands-on Staff Security Engineer to own and shape Homebase's Application Security domain.
  • 💜 Belonging at Homebase - We're committed to fostering a welcoming space where every Homie can be their full self.
  • At Homebase, we celebrate diversity and are proud to be an

Equal opportunity

  • equal opportunity employer.

This listing is sourced directly from Homebase's careers page and normalized into a canonical job model.