Senior Software Engineer, Security

Job description

**About League** League is one of the fastest-growing technology companies in Canada and the leading healthcare experience platform. Getting healthcare is often the easy part — finishing it is where things fall apart: people book the appointment and skip the follow-up, fill the prescription and stop taking it, get the referral and never make the call. That gap costs health plans and health systems money, and it costs people their health. League closes that gap — identifying what each person needs to do next, clearing what’s in their way, and getting it done, for the 70 million+ people whose care already runs through our platform. Health plans and health systems trust us to do this at scale. Organizations like Manulife, SCAN, Geisinger, and Medibank on the payer side, and Baptist and Shoppers Drug Mart on the provider side. **Position Summary** League is seeking a Software Security Engineer to join our Security Engineering org and focus full-time on building internal security tooling and security-by-design engineering capabilities across our healthcare platform ecosystem. This is a highly hands-on software engineering role focused on developing custom security infrastructure, developer security tooling, and automation systems that strengthen League’s platform security posture at scale. You will work closely with Security, Platform Engineering, Infrastructure, and Product Engineering teams to build tools and workflows that improve secure software delivery, automate security operations, and protect sensitive healthcare and member data. This is not a governance, audit, or advisory-only role. We are looking for an engineer who writes production-quality code, builds scalable systems, and applies strong software engineering principles to solve complex security challenges in a modern cloud-native environment. As League continues scaling AI-native healthcare experiences and enterprise platform capabilities, security engineering plays a critical role in ensuring our systems remain secure, resilient, compliant, and developer-friendly. #### **What You will do:** #### **Security Tooling & Platform Engineering** - Design, build, and maintain custom internal security tooling used across League’s engineering organization - Develop automation systems that improve application security, secrets management, identity management, and secure software delivery workflows - Build developer-friendly security tooling integrated into CI/CD pipelines and internal engineering platforms - Create scalable systems for vulnerability detection, remediation automation, policy enforcement, and security telemetry collection #### Secure Software Development - Write secure, maintainable, production-quality code across backend services, APIs, and cloud-native systems - Develop security services and APIs supporting authentication, authorization, secrets management, and access governance - Build and maintain tooling around OAuth/OIDC flows, token lifecycle management, RBAC, service authentication, and secure session handling - Improve secure-by-default engineering practices across League’s platform ecosystem #### **Cloud & Infrastructure Security** - Build and automate cloud security controls across AWS, GCP, and Kubernetes environments - Develop tooling for infrastructure security, workload identity, encryption management, and runtime protection - Partner with Platform Engineering teams to strengthen container security, Kubernetes security posture, and infrastructure hardening - Improve observability and monitoring for security events, anomalous behavior, and operational risk #### **AI & Security Innovation** - Build security capabilities that support AI-native engineering workflows and AI-powered healthcare experiences - Evaluate emerging AI-assisted security tooling and identify opportunities to improve engineering productivity and platform protection - Develop secure workflows and controls around AI-enabled systems and sensitive healthcare data usage #### **Cross-Functional Collaboration** - Partner closely with Security, Infrastructure, Platform Engineering, Compliance, and Product Engineering teams to drive secure engineering practices - Translate security concepts into practical engineering solutions that improve developer experience and operational efficiency - Support security incident response, root cause analysis, and remediation efforts when required **What You Bring** - 5+ years of software engineering experience with strong focus on security engineering, platform engineering, or infrastructure security. - Experience building internal engineering or security tooling in cloud-native production environments. - Strong hands-on backend engineering experience building APIs, services, and automation systems. - Experience implementing secure authentication and authorization systems in production applications. - Experience working in regulated or high-trust environments such as healthcare, fintech, or enterprise SaaS is strongly preferred. - Experience integrating security tooling into CI/CD pipelines and developer workflows. - Experience working with Kubernetes and distributed systems in production environments. - Experience working with AI-enabled systems, AI-assisted engineering workflows, or LLM-based applications is considered a strong asset. **Security-Related Responsibilities** - Ensure access management is performed in compliance with the employee's role and responsibilities - Responsibility and accountability for executing League's policies and procedures within the department/ team - Notification of HR, Legal, Compliance & Security of any incidents, breaches or policy violations - Compliance with Information Security Policies ***CANADA APPLICANTS ONLY:** The Canada-specific compensation range below for this full-time position is exclusive of bonus, equity and benefits. This range reflects the minimum and maximum target for base salaries for the position across all Canadian locations. The salary range is intentional to account for the performance and career progressions a Leaguer will experience in the role throughout their time at League. Where in the band you may land is determined by job-related skills/experience. Your recruiter can share more about the specific salary range specific to your skills and experience during the hiring process.* Compensation range for Canada applicants only $159,100—$198,000 CAD **AI Fluency & Ways of Working** At League, we are an **AI-native organization**. We expect all employees regardless of role or level to thoughtfully leverage AI to improve the quality, speed, and impact of their work. **What this means in practice:** - **Use AI tools as part of your daily workflow** to enhance productivity, problem-solving, and decision-making (e.g., drafting, analysis, coding, research, or process automation) - **Apply judgment and accountability** when using AI by reviewing outputs for accuracy, bias, and quality before use - **Continuously learn and adapt** as new AI tools and capabilities emerge, incorporating them into your ways of working - **Identify opportunities to improve how work gets done**from personal productivity to team-level workflows by leveraging AI effectively - **Operate with strong data responsibility and security awareness**, especially when working with sensitive or regulated information **How this scales by level:** - **Individual Contributors:** Use AI to improve personal productivity and quality of output - **Senior ICs / Managers:** Integrate AI into team workflows and improve processes - **Leaders:** Drive AI adoption at the organizational level and shape how work is done across teams **What we look for:** - Demonstrated experience using AI tools in a practical, responsible way - Curiosity and openness to experimenting with new technologies - Ability to balance efficiency with quality and sound judgment Our employees come from different backgrounds, and we celebrate those differences. We are looking for the best candidates for our open roles, but do not expect applicants to meet every qualification in order to be considered. If you are excited about what you could accomplish at League and believe you can add value to our team, we would love to hear from you. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. If you are an individual in need of assistance at any time during our recruitment process, please contact us at [recruitinginfo@league.com](mailto:recruitinginfo@league.com). **Our Application Process:** Applying to a role you love can be exhausting, and understanding the next steps can feel vague and uncertain. You have done the hard part of submitting your application; let's do ours by sharing potential next steps - You should receive a confirmation email after submitting your application. - A recruiter (not a computer) reviews all applications at League. - If we see alignment with League's needs, a recruiter will reach out to learn more about your goals. The recruiter will also share the team-specific interview process depending on the roles you are exploring. - The final step is an offer, which we hope you will accept! - Prior to joining us, we conduct reference and background checks. Additional checks could be required for US Candidates, depending on the role you are exploring. Here are some additional resources to learn more about League: - [Learn about our platform, leadership team and partners](https://league.com/about/?utm_medium=job+posting) - [Highmark Health, Google Cloud, League: new digital front door to seamless care](https://league.com/newsroom/highmark-google-cloud-digital-front-door-health-experience/?utm_medium=job+posting) - [Former Providence President and Workday EVP of Corporate Strategy join League Board of Directors](https://league.com/newsroom/michael-butler-leighanne-levensaler-join-board-of-directors/?utm_medium=job+posting) - [League raises $95 million USD in Series C to build world’s leading healthcare CX platform](https://league.com/newsroom/league-raises-95-million-to-build-worlds-leading-health-os-platform/?utm_medium=job+posting) - [Forbes x League: The Platformization Of Healthcare Is Here](https://www.forbes.com/sites/forbestechcouncil/2022/06/08/the-platformization-of-healthcare-is-here/?sh=6790a07f145a) - [Fast Company x League: If we want better innovations in healthtech, we need more competition](https://www.fastcompany.com/90795794/if-we-want-better-innovations-in-healthtech-we-need-more-competition) **Work Location:** We have a mix of office-centric roles based in our vibrant Toronto office, and remote-eligible roles based anywhere in Canada or US. Each job posting will indicate where the role will be based. Regardless of the role’s posted location, all Toronto-area Leaguers (living within 65 km of our downtown HQ) collaborate in-office Monday through Thursday. Depending on your distance to the office, you’ll enjoy 10 or 20 Flexible Remote Days each quarter for focus and deep-work time. We are committed to fostering a meaningful work environment and connections for all Leaguers regardless of location. **Recognize and Avoid Employment scams. Practice safe job searching.** Scammers are getting craftier and leveraging fake job postings to get personal information. Know the warning signs and protect yourself from scammers. Learn more [here](https://go.league.com/phishing-guidelines). **Use of AI Notice** We are committed to ensuring fairness and transparency throughout our hiring process. League may use Artificial Intelligence (AI) tools to assist in the screening of applicants for this position. Please check out our stance on using AI in recruitment [here](https://league.com/ai-policy-hiring/). **Privacy Policy** Review our [Privacy Policy](https://league.com/applicant-privacy-notice/) for information on how League is protecting personal data.