Skip to content

Open nowPosted 50 days ago

Product Security Lead

Miovision17 open roles

Pay
CA$163,000 – CA$198,000 a year
Where
Canada Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowProduct Security LeadMiovision · Canada Remote
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Miovision's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. Miovision postings stay open a median of 27 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 50 days ago

Miovision median: 27 days open

The posting

About Miovision:

At Miovision, we’re unlocking transportation networks that move you. Our vision and mission is to enable smart, fast, safe communities that simply flow, as we drive the Intelligent Mobility Revolution. Backed by the world’s most advanced traffic AI, Miovision’s innovations in traffic signal planning and operations are making it possible for cities to improve the transportation experience for drivers, cyclists and pedestrians.

Our values drive us. They’re at the core of everything we do. If they align with yours, proceed through the GREEN light!

- All in to win: We're driven by a winning mindset, approaching every challenge with intensity, clarity, and speed.

- One Miovision: We succeed as one team, uniting diverse talents, building on trust, and putting our shared mission before ego.

- Be better every day: We're committed to continuous growth, staying curious, building mastery, and embracing challenges as learning opportunities.

- Make it happen: We are proactive and results-driven, taking ownership, acting with urgency, and focusing on solutions that deliver real impact.

- Earn the customer: We are deeply customer-centric, focused on earning our customers' partnership every day by delivering exceptional experiences that drive their success.

Position Summary:

At Miovision, we are engineering the future of smart transportation, and to keep our infrastructure safe from digital collisions, we need a highly motivated Product Security Lead to take the wheel. Reporting to the Manager, Cybersecurity Operations, you will be the ultimate defensive driver for our Product Security & Engineering vertical. Your mission is to build security directly into our products, platforms, and engineering lifecycle from the ground up, ensuring we can accelerate down the fast lane of growth without ever compromising safety. You will act as the master traffic controller for product risk, fortifying our software, cloud services, and connected devices against emerging threats. If you are ready to steer our secure-by-design practices, clear the road for major enterprise deals, and ensure security is always a green light for revenue growth, buckle up and join our team!

Objectives and Responsibilities:

- Strategic Leadership: Define, build, and lead the vision, roadmap, and operating model for Miovision’s Product Security function, acting as the primary trusted advisor to the CISO, Product, and Engineering leadership.

- Secure Development (SSDLC): Deeply embed security-by-design into the engineering lifecycle. Lead threat modeling, secure design reviews, and architectural risk assessments while partnering with Engineering to enforce secure coding and CI/CD pipeline security gates.

- Cloud & Platform Fortification: Influence cloud and platform architecture to guarantee system resilience, strict network segmentation, least privilege access, and robust defense-in-depth strategies.

- Risk & Vulnerability Management: Lead product-level risk identification and own the vulnerability management lifecycle for product code, APIs, cloud services, and embedded components, overseeing penetration testing and remediation tracking.

- Go-To-Market Enablement: Partner closely with GRC, Sales, and RevOps to crush RFPs, RFIs, and customer security reviews. Act as a technical authority in customer-facing discussions, turning our security maturity into a massive competitive differentiator.

- Regulatory Translation: Translate complex regulatory, contractual, and audit requirements (ISO 27001, SOC 2, NIST, Tx-RAMP) into highly practical, defensible, and scalable product-level security controls.

- Cross-Functional Operations: Collaborate with Security Operations and Cloud Ops to define product telemetry and logging requirements, ensuring secure-by-default deployment patterns and seamless integration into incident response workflows.

The Ideal Profile:

- The Security Veteran: You bring extensive technical experience in application security, product security, secure engineering, or cloud security, ideally within SaaS or critical-infrastructure environments.

- The SSDLC Master: You have serious hands-on experience applying Secure Software Development Lifecycle practices, including SAST/DAST integration, threat modeling, and building automated security gates into modern CI/CD pipelines.

- The Framework Authority: You are highly experienced in mapping controls to major standards like ISO 27001, SOC 2, and NIST CSF / 800-53, with a working knowledge of NIST SP 800-82 (OT/ICS Security) for connected infrastructure.

- The IoT & Cloud Defender: You have a proven track record of securing connected devices, IoT, or OT-adjacent systems, backed by strong expertise in cloud-native architectures (AWS preferred), APIs, and microservices.

- The Strategic Influencer: You possess the rare ability to influence senior engineers and product leaders without relying on direct authority, effortlessly translating highly technical risks for auditors, executives, and non-technical stakeholders.

- The Analytical Problem Solver: You boast a fiercely analytical mindset and exceptional critical thinking skills, allowing you to make sound, high-stakes judgments under ambiguity.

- The Tooling Expert: You bring strong, practical experience utilizing the OWASP security tool suite and the CISA Cyber Security Evaluation Tool (CSET) to drive rigorous security assessments.

Your Rewards & Well-being: We invest in our team with benefits designed for modern life and true work-life balance.

- Comprehensive Coverage: Your well-being is covered from day one with comprehensive health benefits, 24/7 virtual healthcare access, and dedicated wellness programs.

- Financial Future: Build for tomorrow with our RRSP/401K Matching Plan and share in the company's success through our Variable Incentive Plan.

- Time to Recharge: Truly unplug with our unique Mio-Days and flexible vacation policy.

- Work & Life Support: We support you with flexible work options, an internet subsidy, a remote work allowance, and enhanced leave for new parents.

Sound like your next adventure? Apply now and let's start building together!

This is for an open vacancy.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Please indicate if you require accommodation on your application, and our team will work with you to meet your accessibility needs.

Miovision may use artificial intelligence (AI) to assist in the hiring process for tasks such as helping to identify qualified candidates, taking meeting notes, creating summaries, and streamlining administrative work. These tools are one of several factors considered in the hiring process and do not replace human judgement. We do not use AI to make any final hiring or interview decisions.

PLEASE BE AWARE OF FRAUD: Applicants interested in applying for roles at Miovision should apply directly via the details provided on our careers page. We communicate directly with applicants and will not request banking information, payment, or fees during any point of the recruitment process. We do not conduct interviews via text message. If you suspect that a third party is impersonating Miovision or requesting payment for recruitment on behalf of Miovision, please alert us via [email protected].

To all recruitment agencies: Miovision does not accept agency solicitation or resumes. Please do not forward resumes to our HR alias e-mail address, to any Miovision employee, or to other Miovision e-mail addresses. Miovision will not pay any fees related to unsolicited resumes.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Miovision's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Miovision's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Miovision's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.