search Browse Jobs
Staff Security EngineerCanva · Sydney, au
Canva logo

Canva

company page ↗ Visa Sponsoring Company

Staff Security Engineer

✓ This company has sponsored visas before. The posting doesn't say so, but it's still worth applying.

🗓️ Posted 2026-09-14 Sydney, au Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$15,000–A$22,500/mo

About the Company

Canva is a design platform that aims to redefine how the world experiences design. Its Security Group protects Canva's systems and data from information security threats across Application Security, Risk Management, Enterprise Security, and Threat Detection and Response.

About the Role

The Staff Enterprise Security Engineer is an individual contributor role focused on securing Canva's internal environment, including laptops, networks, identities, SaaS tools, and AI agents, by setting technical direction, guiding teams on risk, and establishing security standards without managing people.

Responsibilities

  • ● Collaborate with teams across the business to identify real risks and build roadmaps together.
  • ● Help teams enable AI workflows safely rather than becoming blockers.
  • ● Review new tools and agents before they are deployed.
  • ● Conduct threat modelling for newer patterns such as MCP, agentic workflows, and SaaS to SaaS integrations, turning findings into adoptable controls.
  • ● Set security standards for other teams and automate work to handle increasing workload without expanding the team.

Requirements

  • ● Proactively seek out problems, demonstrate a self identified issue, rally others around it, and see it through to a fix.
  • ● Influence and persuade IT or engineering leads to adopt initiatives not on their roadmap without a formal mandate.
  • ● Hands on experience in enterprise, corporate, or internal security engineering, building and operating security services in production for endpoints, networks, identity, and SaaS estates.
  • ● Prioritize concepts over tools, understanding why a control works more than the specific tooling.
  • ● Write and review code to a standard trusted by other engineers and default to automation.
  • ● Experience securing a broad enterprise, including less obvious areas such as marketing or sales (nice to have).
  • ● Knowledge of macOS fleet scale security, device trust, posture signals, zero trust, and certificate based device attestation (nice to have).
  • ● Expertise in SaaS security posture, configuration baselines, SSPM, OAuth and third party integration risk, and non human identities (nice to have).
  • ● Experience securing AI agents, MCP servers, or agentic workflows (nice to have).
  • ● Familiarity with action level policy, tool call mediation, audit trails, and containment (nice to have).
  • ● Proficiency with Terraform, Python or Go, and cloud platforms such as AWS or GCP (nice to have).

Benefits

  • ● Hybrid work model offering flexibility to work remotely and collaborate on site when needed.
  • ● Access to a thoughtfully designed Sydney campus with ample space for collaboration, focus, and connection.
  • ● Opportunities to experience moments of magic, connectivity, and fun woven throughout life at Canva.