[Wattpad] Senior Security Engineer

Wattpad’s vision is to entertain and connect the world through stories. A leading global webnovel platform, Wattpad has democratized storytelling for a new generation of diverse Gen Z writers and their fans. Wattpad is part of WEBTOON Entertainment’s IP & Creator Ecosystem, where approximately 155 million monthly active users discover incredible stories in multiple formats. Come build the future of entertainment and storytelling with our global team, and write your next chapter with usWattpad is part of the WEBTOON Entertainment family of brands, home to some of the world's largest storytelling platforms. With approximately 155 million monthly active users, WEBTOON Entertainment’s IP & Creator Ecosystem of aligned brands and platforms include WEBTOON, Wattpad--the world’s leading webnovel platform--WEBTOON Productions, Studio N, Studio LICO, WEBTOON Unscrolled, LINE MANGA, and eBookJapan, among others. To read more about our family of Brands, check out our website . As a Sr. Security Engineer, you’ll be working closely with the Engineering, Data, and Product teams to embed security into the evolution of our systems. You will play a pivotal role in protecting our organization's data, systems, and networks while ensuring our engineering velocity remains high.As a senior member of the Security Team, you will work to drive the security vision for the department and will be responsible for influencing thinking across multiple teams to improve how we build secure software in general.Wattpad runs on a large distributed system that handles tens of thousands of requests every second. You’ll be securing our AWS cloud infrastructure and helping us mature our application security program. Our security stack relies on AWS Security Hub, GuardDuty, and WAF for infrastructure protection, while leveraging Datadog and Splunk for observability and threat detection. We are heavily invested in infrastructure-as-code using Terraform and are looking to automate security workflows using Python and GitHub Actions.What You'll Do:Designing, implementing, and monitoring security controls in our AWS cloud infrastructure to balance protection with scalability.Influencing the technical direction of the Engineering & Data department by introducing secure development practices and threat modeling.Acting as a force multiplier by building security automation workflows and "guardrails" that allow teams to ship code safely and quickly.Directly solving complex security challenges, including incident response, root cause analysis, and remediation of vulnerabilities.Assisting teams in implementing access management and compliance controls, compliance (SOC 2/ISO 27001), and risk governance.Building and maturing our application security program, partnering with engineering teams to triage findings from our Vulnerability Disclosure Program.Collaborating with engineers on implementing security best practices to help raise the security bar across the organization.Required Qualifications:5+ years of work experience in SecOps, Cloud Security, DevSecOps, or similar security-focused roleAWS security expertise: Hands-on experience with Security Hub, GuardDuty, Inspector, AWS WAF, and IAM policy managementSIEM experience highly desirable: Datadog, Splunk, or similar platforms (query development, alert tuning, incident investigation)Proficiency with infrastructure-as-code security: Terraform, CloudFormation, or similarExperience with containers and Kubernetes (EKS preferred) including security hardeningStrong scripting and automation skills: Python, Bash, PowerShellExperience securing CI/CD pipelines (GitHub Actions strongly preferred)Familiarity with MITRE ATT&CK and D3FEND frameworksUnderstanding of enterprise and cloud network security architecture and controlsSOC 2 and/or ISO 27001 compliance experienceSelf-starter comfortable with ambiguity - ability to define and execute on loosely-scoped problemsBalanced communication style - proactive collaborator when needed, deep-focus engineer when requiredExcellent written and verbal communication skills for cross-functional collaborationPreferred Qualifications:Experience building application security programs from early stagesHands-on experience with Data Loss Prevention (DLP) solutionsFamiliarity with HackerOne, Bugcrowd, or similar bug bounty/VDP platformsExperience implementing threat modeling practices (STRIDE, PASTA, or similar)Just-In-Time (JIT) access implementation experienceExperience with security orchestration and automation (SOAR)Cloud security certifications: AWS Security Specialty, CCSP, CCSKOffensive security background: OSCP, GPEN, CEH or practical CTF/red team experienceContributions to security open-source projects or published security researchExperience debugging complex systems across different layers of the stack$110,000 - $150,000 a yearPlease note, the range above is listed in CAD. This position qualifies for the full suite of benefits.What we offer (For Full-Time Only):* Career development; we believe in mentorship and investing in your learning, supporting you to achieve your goals* Top industry health benefits, including vision and dental Your own health/wellness account to spend each year* RRSP Contributions (Canada), 401K Contributions (USA)* Generous vacation and Maternity/Parental leave top-up program* Corporate discount for gym memberships for you and your family* Work from almost anywhere in the world for part of the year* Winter break shutdown and a whole lot moreWattpad is conducting all interviews in a distributed manner using applicable third party software where needed and using visual interface tools such as Google Meet and Zoom.About WattpadWho are we? Entrepreneurs and Do-ers. Our vision is to entertain and connect the world through stories, and our mission is to use the power of community and technology to unleash the full potential of stories to the world.What does that mean? We are visionaries, community builders, passionate problem solvers, storytellers, coffee snobs (tea drinkers, too), curious by nature, and culturally diverse.What are we obsessed with? Our users. Solving complex problems and maximizing flow. Learning constantly. Building the next great storytelling product. Finding the greatest stories ever told. Dogs (and cats), coffee, and good snacks.How do we work? Autonomously, collaboratively, respectfully. Balancing with work, family, and all while having a great time.Wattpad is a remote friendly company and encourages remote candidates to apply as long as they are located and authorized to work in either the US or Canada (excluding Quebec) as a precondition of employment. We are not able to sponsor applicants for work permits. Unlock the best of both worlds with a remote role that keeps you connected We're looking for passionate individuals in the Greater Toronto Area to join our team. While you'll enjoy the flexibility of working from home, you can take advantage of periodically coming to our vibrant downtown Toronto office to connect with colleagues, collaborate on exciting projects, and take part in company events. This is your opportunity to be a part of our thriving workplace culture.Culture and DiversityWattpad is an equal opportunity employer. We do not discriminate. Period. Wattpad welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. We have taken a leadership position on creating a culture and an organization that truly values diversity. We are committed to fostering a global team that reflects the diversity of the Wattpad community. At Wattpad, we believe cultural fit doesn’t mean culturally identical, and diversity of thought helps us to challenge one another to think big and think differently. We consider employment applicants without regard to age, race, colour, national origin, citizenship, religion, creed, sex, sexual orientation, veteran status, marital status, disability status or any other protected status. If you have any special needs or accessibility requirements, please let us know. We will do our utmost to accommodate, in accordance with applicable local legislation.Don’t meet all the requirements? Studies show women and people of colour are less likely to apply to jobs if they do not meet all the qualifications. Therefore, in an effort to build a more diverse workplace, we encourage you to apply anyways. You might actually be the right person or you may be a good fit for a number of other openings we currently have.#WattpadWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.