SeniorSecurityEngineer

Hiive is redefining how private companies and their shareholders access liquidity. Through its institutional-grade platform, Hiive brings together buyers, sellers, and issuers to facilitate secondary transactions in venture-backed, pre-IPO companies, introducing efficiency, transparency, and standardization to an otherwise opaque asset class. Recognized as one of Canada’s fastest-growing companies and backed by leading U.S. investors, Hiive is profitable, well-capitalized, and building a high-performance team to meet growing demand and pursue new market opportunities. Interested in learning more about life at Hiive? Check out our careers page https://www.hiive.com/careers to see how you can grow with us! As a Senior Information Security Engineer at Hiive, you'll own vulnerability management end-to-end on a three-person security team and be the security partner for every department adopting AI. Teams across the company — engineering, product, operations, finance — are rolling out AI tools and agents at an accelerating pace, and you'll make sure that happens without opening new attack surface or leaking sensitive data. You'll also keep our patching, scanning, and remediation cycles ahead of an industry curve where time-to-exploitation has collapsed from months to hours. In this role, your responsibilities would include: - Triaging and coordinating remediation of vulnerabilities across SAST, SCA, DAST, CSPM, external reconnaissance, security advisories, and external bug reports on a defined SLA. - Tuning the existing security stack, reducing noise, and prioritizing exploitable vulnerabilities over raw severity — validating real-world exposure before remediation effort is spent. - Integrating LLM-based code review into the CI/CD pipeline so every change — human-written or AI-generated — gets a security review before merge. - Acting as the security point of contact for any department adopting AI tools, agents, MCP integrations, or custom AI/ML pipelines: reviewing propos