SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Nesto, a Deloitte Fast 50 company and Canadian Rocketship 2025, is disrupting the $2.1 trillion mortgage industry by building the mortgage ecosystem of the future. The company is seeking a hands-on Senior Lead Security Engineer to build and scale offensive and product security practices from the ground up.
Reporting directly to the Director of Security Engineering, you will serve as a player-coach—bringing offensive expertise in-house, embedding repeatable threat modeling into the engineering lifecycle, and mentoring a high-performing security team. Your responsibilities span offensive security testing, threat modeling design, and automation of security tooling.
Key responsibilities include:
- Conducting hands-on offensive security assessments and penetration testing to identify and validate vulnerabilities
- Designing and embedding threat modeling practices into the product development lifecycle
- Building and scaling a security team, mentoring engineers in security best practices
- Automating security tooling and processes to improve detection and response capabilities
- Collaborating with engineering teams to integrate security controls into modern tech stacks
- Protecting digital infrastructure that powers Canada's mortgage industry
You will work alongside top developers, AI engineers, and mortgage experts in a hypergrowth environment. The role combines technical depth in offensive security with leadership and mentorship, requiring both hands-on expertise and the ability to scale security practices across the organization. Nesto has been recognized as a CLA Lending Company of the Year for four consecutive years and a CMP Top Mortgage Employer 2025.
