Security Engineering Manager - Vulnerability Management, Application Security

2 Months ago • 6-8 Years • Software Development & Engineering

Job Summary

Job Description

As a Security Engineering Manager for Vulnerability Management at Canva, you'll lead a team responsible for identifying, assessing, and automating the resolution of security vulnerabilities across Canva's global ecosystem. This role requires driving the delivery of application security solutions, fostering a security-first culture within engineering teams, and making secure solutions easy to implement. Responsibilities include technical decision-making, team growth and development, cross-team collaboration, and strategic project delivery. You'll work with engineers to develop and scale security solutions, navigate complex problems, and balance security rigor with Canva's fast-paced innovation. The team uses a strategic, build-versus-buy approach to deliver robust capabilities that offer visibility, early detection, and actionable insights, focusing on reducing toil and driving remediation at scale.
Must have:
  • Lead engineering or security teams
  • Hands-on technical leadership
  • Cloud experience (AWS, GCP, Azure)
  • Deep understanding of vulnerability management
  • Strong communication skills
  • Experience with engineering tradeoffs
Good to have:
  • AWS subject matter expertise
  • Experience scaling security solutions through automation
  • Experience with vulnerability management at scale
Perks:
  • Equity packages
  • Inclusive parental leave
  • Annual Vibe & Thrive allowance
  • Flexible leave options

Job Details

Job Description

Join the team redefining how the world experiences design.

Hey, g'day, mabuhay, kia ora, 你好, hallo, vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point.

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work, we trust our Canvanauts to choose the balance that empowers them and their team to achieve their goals.

What you’d be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start, but this will likely evolve.

At the moment, this role is focused on:

  • Drive delivery of Application Security solutions for our large-scale, cloud-native and SaaS application stack, from ideation to completion within start-up time frames, to securely support Canva’s rapid growth
  • Support a security-first engineering culture by making the optimally secure solution the easiest one for software engineering teams to use 
  • Drive technical decision making support to your team in a fast-paced, innovation-focused environment
  • Foster a culture of communication, bridging the communication gap between teams, groups, and company leaders
  • Invest in working with engineers on growth and development opportunities to help further their skillset and grow into new roles, with an ability to deliver relevant and timely feedback (positive & constructive) to help them to continuously improve and learn
  • Be involved in hiring; build and grow high-performing and highly engaged teams of world-class engineers by attracting, interviewing, and selecting talent for your group
  • Coordinate across various specialties and parts of the business to understand the impact and feasibility of strategic goals within the group, and how that impacts your own roadmap.
  • Drive delivery of large, cross team and cross group initiatives and projects from ideation to completion.

You're probably a match if

  • You’ve led engineering or security teams and love growing people from all levels, while scaling systems.
  • You’re a technical hands on leader (with previous experience as a Software or Security engineer), who is comfortable getting into the thick of it when needed using software engineering fundamentals and security first principles to guide technical decision making
  • Previous experience in cloud-based environments (AWS, Google Cloud, Azure) with a working knowledge of broad infrastructure functions - CI/CD pipelines, automation, site reliability etc.
  • You bring deep understanding of vulnerability management practices — across infrastructure, application security, and cloud environments.
  • You’re comfortable working with ambiguity, designing programs, and influencing beyond your immediate team.
  • You can communicate clearly with technical and non-technical audiences and love turning complex problems into simple, effective solutions.
  • Experience making careful engineering tradeoffs, particularly around "Build vs Buy", evaluating potential third party systems to partner with, and managing and working with vendors to meet Canva's business needs
  • Strong customer focus to understand the use cases and requirements of internal stakeholders, and identify opportunities to empower them to do their best work

While not required, you’ll have an edge if you bring:

  • Subject-matter expertise of Amazon Web Services and associated technologies and products within the AWS ecosystem
  • Previous experience leading teams to scale security solutions through automation, continuously reducing the tax that security requirements can impose on software development and operations
  • Experience working on delivering vulnerability management at scale in a fast paced, rapid growth environment

About the role

As a Security Engineering Manager for the Vulnerability Management team, you’ll lead a team dedicated to identifying, assessing, and automating the resolution of security vulnerabilities across Canva’s global ecosystem. Your mission is to empower engineers with the tools and context they need to make secure decisions by default—making the secure path the easiest path. We need to be able to ship robust and secure features without sacrificing speed and scale of delivery.

Our Vulnerability Management team takes a strategic, build-versus-buy approach to deliver robust capabilities that offer visibility, early detection, and actionable insights. We're focused on reducing toil, abstracting away complexity, and driving remediation at scale—so product teams can focus on building, not fixing. You'll guide engineers as they develop and scale security solutions, navigate complex problem spaces, and balance security rigor with Canva's pace of innovation.


About the Security Group

The Security Group’s mission is to protect our community, people, and company from online threats by making the most secure actions simple. Our teams work together, and with other groups, to deliver preventive and detective controls and processes that reduce security risk. The group runs programs across Identity and Access Management, Application Security, Risk Management, and Threat Detection and Response domains.  Within this group, the Vulnerability Management team ensures we’re proactively identifying and reducing risk across Canva’s systems and codebase. We partner deeply with product teams and platform engineers — building shared tooling, defining scalable processes, and helping Canva grow securely.

What's in it for you?

Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a range of benefits to set you up for every success in and outside of work.

Here's a taste of what's on offer:

  • Equity packages - we want our success to be yours too
  • Inclusive parental leave policy that supports all parents & carers
  • An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
  • Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally

Check out lifeatcanva.com for more info.

Other stuff to know

We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

We celebrate all types of skills and backgrounds at Canva so even if you don’t feel like your skills quite match what’s listed above - we still want to hear from you!

Please note that interviews are conducted virtually.

Similar Jobs

cyara - Associate Customer Success Manager

cyara

United States (Remote)
9 Months ago
Britive - Enterprise Sales Development Representative

Britive

Boston, Massachusetts, United States (On-Site)
2 Months ago
Sonar Source - Enterprise Account Executive - Melbourne

Sonar Source

Melbourne, Victoria, Australia (On-Site)
7 Months ago
appier - Campaign Analyst (EMEA) 04:00 PM -01:00 AM working hours

appier

Taipei City, Taiwan (On-Site)
8 Months ago
Vercel - Partner Manager, Benelux and Southern Europe

Vercel

Netherlands (Remote)
1 Month ago
Sabre India - SAP Basis Administrator

Sabre India

Bengaluru, Karnataka, India (On-Site)
1 Month ago
Intel  - GPU Design Verification Engineer

Intel

Bengaluru, Karnataka, India (On-Site)
1 Year ago
Amazon games  - Software Development Engineer

Amazon games

Bucharest, Bucharest, Romania (On-Site)
2 Months ago
ElevenLabs - Design Engineer

ElevenLabs

Poland (Remote)
3 Months ago
InnoPhase IoT - Sr. Staff/Principal Engineer, Digital Design

InnoPhase IoT

San Diego, California, United States (On-Site)
2 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Figma - Account Executive, Enterprise

Figma

London, England, United Kingdom (Hybrid)
2 Weeks ago
Rippling - Customer Support Supervisor

Rippling

Bengaluru, Karnataka, India (Hybrid)
1 Week ago
Scopely - Senior Security IAM Engineer

Scopely

Lisbon, Lisbon, Portugal (Hybrid)
3 Months ago
Vimeo - Account Manager II

Vimeo

New York, United States (On-Site)
1 Month ago
Capgemini - Application Consultant

Capgemini

Mumbai, Maharashtra, India (On-Site)
2 Months ago
GoMotive - Regional Vice President, Strategic Networks

GoMotive

United States (Remote)
2 Months ago
Loyalty Juggernaut - Project Manager

Loyalty Juggernaut

Hyderabad, Telangana, India (On-Site)
1 Year ago
Rippling - Commercial Counsel

Rippling

San Francisco, California, United States (On-Site)
3 Weeks ago
Mindtickle - Principal Professional Services Consultant

Mindtickle

Pune, Maharashtra, India (Hybrid)
1 Month ago
WebFX - Customer Support Specialist (SaaS Experience)

WebFX

(Remote)
3 Months ago

Get notifed when new similar jobs are uploaded

Jobs in Surry Hills, New South Wales, Australia

Morning Star - Talent Acquisition Lead

Morning Star

Sydney, New South Wales, Australia (Hybrid)
1 Month ago
Wolters Kluwer - Senior Business Development Manager

Wolters Kluwer

Melbourne, Victoria, Australia (Hybrid)
4 Weeks ago
Varonis  - SOC & IR Specialist

Varonis

Melbourne, Victoria, Australia (On-Site)
1 Month ago
Milestone - Solutions Engineer

Milestone

New South Wales, Australia (Remote)
2 Months ago
VGW - Senior Machine Learning Engineer

VGW

Sydney, New South Wales, Australia (Hybrid)
5 Days ago
Telastra - Telstra Retail: Full Time Customer Service & Sales Consultant WHYALLA

Telastra

Whyalla, South Australia, Australia (On-Site)
1 Month ago
Telastra - Network Technical Specialist

Telastra

Ningi, Queensland, Australia (On-Site)
3 Weeks ago
lucas films - Mobility Specialist

lucas films

Sydney, New South Wales, Australia (On-Site)
2 Months ago
Pivotroots - Group Practice Head (AUTOMOTIVE)

Pivotroots

Melbourne, Victoria, Australia (Hybrid)
3 Weeks ago
Telastra - Full Time Customer Service & Sales Consultant

Telastra

Gympie, Queensland, Australia (On-Site)
1 Month ago

Get notifed when new similar jobs are uploaded

Software Development & Engineering Jobs

Jane Street - Evening Move-Add-Change Engineer

Jane Street

Hong Kong (On-Site)
1 Month ago
Roblox - Principal Software Engineer - Voice

Roblox

San Mateo, California, United States (On-Site)
2 Weeks ago
Lilith games - Senior UE4 Client Development Engineer (Farlight84)

Lilith games

Shanghai, China (On-Site)
1 Month ago
PwC - Manager-SAP BODS-TC-Kolkata

PwC

Kolkata, West Bengal, India (On-Site)
9 Months ago
Cadence - Design Engineer II

Cadence

Bengaluru, Karnataka, India (On-Site)
1 Month ago
Trellix - Senior Software Engineer

Trellix

Bengaluru, Karnataka, India (On-Site)
3 Weeks ago
Capgemini - MlOps Engineer

Capgemini

Bengaluru, Karnataka, India (On-Site)
3 Weeks ago
Apple - Senior Software Engineering Manager, Incubation team

Apple

Cupertino, California, United States (On-Site)
1 Month ago
Samsung Semiconductor - Principal Engineer, DRAM

Samsung Semiconductor

San Jose, California, United States (On-Site)
1 Month ago

Get notifed when new similar jobs are uploaded

About The Company

Auckland, Auckland, New Zealand (Remote)

Austin, Texas, United States (Remote)

Sydney, New South Wales, Australia (Remote)

Auckland, Auckland, New Zealand (Remote)

Brisbane, Queensland, Australia (Remote)

Sydney, New South Wales, Australia (Remote)

Austin, Texas, United States (On-Site)

Austin, Texas, United States (Remote)

Austin, Texas, United States (Remote)

View All Jobs

Get notified when new jobs are added by Canva

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug