Principal Security Engineer, Crypto

Wealthsimple is on a mission to help everyone achieve financial freedom, no matter who they are or how much they have. Using smart technology, Wealthsimple takes financial services that are often confusing, opaque and expensive and makes them simple, transparent, and low-cost. We're the company behind some of Canada's leading digital financial products, and are growing faster than ever.
Our team is reimagining what it means to manage your money. Smart, high-performing team members will challenge you to learn and grow every day. We value great work and great ideas — not ego. We're looking for talented people who love a fast-paced environment, and want to ship often and make an impact with groundbreaking ideas.
We’re a remote-first team and output is more important than face time, so where you choose to work is up to you — as long as you have internet access, you can work from anywhere in Canada. Be a part of our Canadian success story and help shape the financial future of millions — join us! Read our Culture Manual and learn more about how we work.
At Wealthsimple, we are building products for a diverse world and we need a diverse team to do that successfully. We strongly encourage applications from everyone regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status. Wealthsimple provides an accessible candidate experience. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know.
Throughout the interview process, we’ll learn more about your skills and interests to match you with the right team at Wealthsimple.
About the role:
The Wealthsimple Security organization champions the mandate of protecting our clients, products and business. We believe that security should be built into the fabric of everything we do, across all domains, products and teams. The team protects the systems that help hundred of thousands of users manage billions of dollars in assets. We use a micro service architecture and an agile approach, focused on short iterations and rigorous automated testing, deploying our code over 100 times a day.
The roles of Staff and Principal Engineer at Wealthsimple share a number of similarities. In particular, both are technical IC roles with impact beyond individual teams. Our Staff Engineers are domain experts that drive the technical direction and impact Product or foundational domain; Principal Engineers are deep subject matter experts that work across all of engineering.

In this role, you’ll have the opportunity to:

• Mentor, coach, and grow a cross functional team of security professionals
• Partner with various engineering groups across Wealthsimple to ensure that the technologies and systems we build and deploy are designed and maintained in a secure way that minimizes risk
• Lead security research projects in the areas of GraphQL, Crypto, and Mobile Application Security

We’re looking for someone who:

• Has experience working with GraphQL, Open Policy Agency, OAuth through the lens of security
• Strong understanding with DeFi, MPC, blockchain, and underlying crypto technologies and operational processes
• Experience conducting and implementing learnings through deep research into new and innovative technology domains
• Has experience working with Ansible, Terraform and Nomad; and has implemented automation and orchestration to enhance the DevSecOps pipeline
• Provide secure code reviews & identify security anti-patterns for product and infrastructure engineering team
• Is able to clearly and effectively communicate, internally and externally, the organization’s vision and strategy and explain technical decisions, even serving as a translator between different teams
• Has experience building, evolving, and maintaining large scalable systems
• Contributes to best practices in leadership and people management, especially when it comes to hiring at the senior level
• Is a mentor and who will have a large positive impact on morale and company culture
• Is an effective listener, consensus builder and effectively incorporates diverse ideas into a coherent vision