Senior Application Security Engineer, Canary Technologies
Providing hospitality technology
Open for applications
Providing hospitality technology
101-200 employees
Open for applications
101-200 employees
Company mission
To help hoteliers thrive through innovative software solutions.
Role
Who you are
- 6+ years in security engineering, DevSecOps, or related roles, including experience at scale
- Excellent communication and teamwork abilities
- Strong experience integrating security into modern SDLC pipelines
- Hands-on with AppSec tooling (Snyk, OWASP ZAP, Burp Suite, SonarQube, Checkmarx, etc.)
- Solid understanding of web app security (OWASP Top 10, API security, auth flows, input validation)
- Familiarity with AWS/Kubernetes security
- Strong programming skills (Python, Go, or JavaScript) to build tools, write secure code, and contribute to developer libraries
- Proven track record in partnering with product and engineering teams to drive security adoption without slowing down velocity
- Strong AWS security skills (IAM, KMS, Security Hub, GuardDuty, WAF)
- Experience with Kubernetes security (RBAC, OPA/Gatekeeper, network policies)
- Hands-on with Terraform, Helm, and GitOps practices
- Familiarity with security tooling (Trivy, Falco, Snyk, Aqua)
- Knowledge of networking, encryption, and cloud-native security best practices
What the job involves
- Our team is growing and we're hiring a Senior Application Security Engineer to join our engineering team and enable our next phase of growth
- Canary's engineering team is fully remote!
- This role focuses on embedding security into the software development lifecycle (SDLC), partnering with developers to make secure design the default
- You will own the strategy for application security tooling, automation, and developer enablement while collaborating closely with SREs, infra, and data engineers to keep our platform both secure and scalable
- Define and enforce best practices for secure coding, dependency management, and design reviews across engineering teams
- Integrate and manage SAST, DAST, and SCA tools within CI/CD pipelines (e.g., GitHub Actions)
- Partner with developers on new features and systems to identify risks early in the lifecycle
- Implement best practices for secrets handling, API authentication/authorization, and data protection
- Build security guidelines, training, and reusable libraries/patterns so that teams can ship secure code faster
- Triage and prioritize findings from bug bounties, penetration tests, and automated scans, ensuring timely resolution
- Act as the bridge between application developers and platform engineers to align app security with infra and compliance requirements
- Implement monitoring, alerting, and remediation for security incidents across our platform
- Scan and remediate vulnerabilities in container images, OS packages, dependencies, and IaC templates
- Design and maintain least-privilege IAM roles, secrets management, and authentication flows
- Automate evidence gathering and control enforcement for SOC 2, ISO 27001, and others
Our take
Embracing the modern era, Canary Technologies is dedicated to revolutionizing the hotel industry through digital transformation. Pioneering the field with its mobile web-based Guest Management System and Digital Authorization solutions, Canary aims to rid hotels of outdated technology, enhancing revenue streams by boosting staff productivity and delivering superior guest experiences.
Co-founders Harman and SJ, childhood friends turned business partners, bring a unique blend of expertise to the table, drawing from their extensive background in both hospitality and technology sectors. With the industry already on an upward trajectory, the post-pandemic landscape has further fueled the demand for their solutions, particularly their contactless check-in and checkout offerings.
Despite competition in the sector, Canary has secured significant funding led by F-Prime Capital, enabling rapid expansion and talent acquisition to meet the burgeoning demand for its innovative solutions.
Freddie
Company Specialist at Welcome to the Jungle
Insights
59% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jun 2025
$80m
SERIES D
Jun 2024
$50m
SERIES C
Total funding: $175.2m
Company benefits
- Our health insurance has you covered on day 1
- Flexible working hours
- Training and career development
- Regular team building events
- A travel stipend for when you stay at Canary hotels
- Internal promotions from within the team
- Kitchen stocked with fruit, snacks, coffee, and more
- We're a diverse and global team
Company HQ
SoMa, San Francisco, CA
Leadership
Harman Singh Narula
(Co-Founder & CEO)Previously founded a custom printed apparel company, The Shirt Guys, LLC. Worked in strategy for Citigroup and Starwood Hotels & Resorts Worldwide, Inc, and as a Management Consultant for Bain & Company.
Satjot "SJ" Sawhney
(Co-Founder)Previously co-founded Mobibolt, Inc and Tapfame before serving as Head of Product at the hospitality technology startup, Stayful.
Share this job
View 44 more jobs at Canary Technologies