Security Assurance Engineer, TrustFlight

• 3–5 years of relevant experience in security engineering, platform security, security assurance, or closely related roles
• Strong understanding of cloud and modern software architectures (e.g., Azure/GCP, containerized environments, CI/CD pipelines)
• Hands-on experience implementing and operating security controls such as logging and monitoring, IAM, vulnerability management, and incident response tooling
• Practical experience with SIEM platforms and security telemetry (log sources, detection logic, alerting, and investigations)
• Working knowledge of security frameworks and standards (e.g., ISO 27001, SOC 2), with experience translating requirements into technical controls and evidence
• Ability to assess security risk pragmatically and communicate findings clearly to both technical and non-technical stakeholders
• A growth mindset: you are curious, continuously learning, and open to feedback and improvement
• Strong ownership mentality. You take responsibility for outcomes, not just tasks
• Comfortable working in a scaling, fast-moving environment with evolving systems and priorities
• Bachelor’s or Master’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or a related field, or equivalent practical experience
• This is an on-site role with room for flexibility, because we know life doesn't always fit a 9-to-5 mould

Desirable

• As a Security Assurance Engineer, you will help ensure TrustFlight’s aviation software and services are secure, resilient, and trustworthy as the company scales globally
• This is a hands-on role focused on building and validating security controls that work in practice, not just on paper
• Based in Canada, you will report to the CIO and work closely with Platform, Infrastructure, and Application Engineering teams across multiple time zones
• Your work directly supports TrustFlight’s ability to meet regulatory, customer, and aviation-industry security expectations while enabling teams to move quickly and safely
• Design, implement, and own security solutions, controls, and supporting tools across the platform, infrastructure, and application security surfaces
• Define, implement, and continuously validate security controls, ensuring they are effective in real-world operation, not just on paper
• Take ownership of the Security Information and Event Management (SIEM) capability, ensuring effective security monitoring, investigation, and assurance
• Identify, assess, and prioritize security risks and control gaps, translating findings into concrete technical and operational improvements
• Leverage automation, including AI-assisted techniques where appropriate, to improve security monitoring, control validation, and the efficiency of assurance workflows
• Partner closely with platform, infrastructure, and application engineering teams to embed security into system design, delivery, and operations
• Ensure systems emit the right security-relevant telemetry to support detection, investigations, and evidence-based assurance
• Own the technical implementation of industry security frameworks and certifications (e.g., ISO, SOC 2, CE+), ensuring standards are consistently upheld through practical engineering controls and verifiable evidence
• Support incident reviews and post-incident improvements with a focus on control effectiveness, prevention, and systemic improvement

• Click Apply and send us your resume along with a cover letter. We’d love to learn how your experience and perspective can contribute to creating best-in-class tools and services across the aviation industry