Security Software Engineer

About Motive

Motive equips operational teams managing physical assets with innovative tools designed to enhance safety, efficiency, and profitability. Their platform integrates safety, operations, and financial teams to oversee drivers, vehicles, equipment, and fleet expenditures in one unified system. Leveraging advanced AI, Motive's solution provides full transparency and control, notably decreasing manual work through automation and process streamlining.

Serving nearly 100,000 clients ranging from Fortune 500 enterprises to small businesses, Motive covers diverse sectors including transportation, logistics, construction, energy, field service, manufacturing, agriculture, food and beverage, retail, and the public sector.

Role Overview

In the position of Security Software Engineer, you will architect and develop secure, scalable systems safeguarding Motive’s applications, infrastructure, and client data. Reporting to the Security Engineering Manager, you'll collaborate with engineering and product departments to embed security best practices throughout the software development lifecycle.

Key Responsibilities

• Design, develop, and maintain authentication workflows and OAuth integrations across Motive’s product suite.
• Create and enhance authorization platforms to ensure secure, scalable access control over product features and customer information.
• Implement BYOK (Bring Your Own Key) functionalities and security controls tailored for clients with stringent data protection needs.
• Develop and sustain security tools, services, and automation spanning products and cloud infrastructure.
• Conduct thorough reviews including architecture assessments, code audits, data handling evaluations, and threat modeling to minimize security vulnerabilities.
• Establish and promote secure design frameworks, controls, and reusable guidelines for engineering teams.
• Collaborate with product and engineering units to address vulnerabilities and advance application security standards.
• Lead complex security initiatives from initial design to deployment and continuous enhancement.
• Engage in various security testing methods such as SAST, DAST, dependency analysis, penetration testing, and attack-tree analysis.
• Mentor engineering staff and foster consensus on security-related technical decisions.

Qualifications and Experience

• Minimum of 5 years’ experience in software engineering, security engineering, application security, or related domains.
• Proficiency in programming languages such as Python, Go, JavaScript, or equivalents.
• Hands-on experience designing and implementing authentication mechanisms, OAuth protocols, authorization systems, or identity platforms.
• Expertise in identifying and mitigating typical application security threats, including those listed in the OWASP Top 10.
• Knowledge of security controls for cloud applications and infrastructures, with an emphasis on AWS environments.
• Familiarity with secure software practices encompassing threat modeling, vulnerability management, and security automation.
• Practical experience with containerization tools like Docker and Kubernetes, identity and access management, secrets management, encryption techniques, and open-source security tools.
• Strong interpersonal skills for cross-functional collaboration and effectively communicating complex security concepts.

Compensation and Benefits

Remuneration is influenced by education, work history, and certifications, potentially including restricted stock units. Benefits encompass health, pharmacy, optical and dental coverage, paid leave, sick days, short- and long-term disability plans, life insurance, and 401(k) contributions, subject to eligibility. The salary bracket for this role in Canada ranges from CAD 146,000 to 180,000 annually.

Additional Information

Motive is committed to diversity and inclusion, welcoming candidates from varying backgrounds, abilities, and perspectives. Candidates must be authorized to access commodities regulated under U.S. Export Administration Regulations. For U.S.-based roles, some restrictions may apply regarding non-compete agreements depending on location and position. Interviews and training could occur in-person at global office locations.