Job detail for Lead Security Engineer

About Us
Think about your last hotel stay. Did you skip the front desk line with mobile check-in? Message the staff for extra pillows? Order a late-night snack with a tap on your phone? Then you’ve likely run into Canary in the wild.
Canary Technologies is the leading agentic AI platform for hotel and guest management, powering the digital infrastructure for more than 20,000 hotels in 125+ countries. The world's most renowned hospitality brands, including Marriott International, Four Seasons and Wyndham Hotels & Resorts, partner with us to increase revenue, improve operations and elevate the guest experience.
We’ve executed the largest deployment of autonomous AI systems in hospitality, building technology that fundamentally redefines how guests and hotels interact. It’s made us one of the top-funded hotel technology companies in the world, with nearly $200M raised to date.
Canary has been recognized as a 2024 and 2025 Deloitte Technology Fast 500™ company, Inc. 5000 fastest-growing company, and swept the 2026 HotelTechAwards, including Best Place to Work, #1 Guest Experience Platform, and the Hotelier’s Choice Award. We’re scaling our team to bring innovation to life faster than ever.
We're growing quickly, and we're looking for people who are passionate about their work, want to grow with us and are ready to take on more responsibility along the way. We value rigor and velocity in equal measure: high standards, fast pace, real ownership. If that's the environment you're looking for, this is the place for you.
Come join us! Let’s shape the future of hospitality together.

What You’ll Do
Lead, coach, and grow the Security team, including hiring, performance, priorities, and career development
Own Canary's security and compliance program (SOC 2, PCI DSS, GDPR/CCPA, and other applicable frameworks)
Serve as the primary security point of contact for Canary
Own vendor and third-party risk management
Write, maintain, and communicate security policies and standards company-wide; run security awareness and training
Set technical direction for security tooling and stay hands-on in architecture and threat-model reviews

What We’re Looking For
8+ years in security engineering, including 2+ years leading a team as a manager or tech lead
Proven experience owning compliance programs end to end (SOC 2 Type II, PCI DSS, ISO 27001, or similar)
Exceptional written and verbal communication
Hands-on technical foundation in cloud security (AWS), identity and access management, application security, and vulnerability management
Experience with vendor risk management and reviewing security terms in customer and vendor contracts
Track record of building pragmatic, risk-based security programs at a growth-stage SaaS company
Nice to have: hospitality, fintech, or payments industry experience; CISSP, CISM, or CISA

Perks & Benefits
We work hard to make Canary a fun, rewarding, and high-energy place to work. Here’s how we take care of our flock:
Time Off
Unlimited PTO: Take the time you need to truly rest and recharge.
Holidays + Canary Days: Standard holidays plus monthly company-wide days off for a guaranteed long weekend.
Birthday Holiday: A dedicated day off to celebrate you!
Travel & Office Flexibility
Office Exchange: A travel stipend to visit the team in person at our SF, NY, or Dallas hubs.
Canary Hotel Experience: Staying at a Canary hotel? We’ve got you covered with a credit toward your stay.
Preferred Hotels Discount: Enjoy a minimum 30% off the best available rate at select partner hotels globally.
Growth & Community
Self Improvement Club: A monthly budget to help you smash your personal goals.
Professional Development: Level up your career with a dedicated learning stipend to fuel your skills and cross-functional connection.
Referral Program: Help us grow the flock and score a cash bonus for successful hires.
 
Canary Technologies is an equal opportunity employer. We recruit, employ, train, compensate and promote talent regardless of race, religion, ethnicity, national origin, citizenship, gender, gender identity, sexual orientation, age, veteran status, disability, genetic information or any other protected characteristic.