Security Engineering Manager - Vulnerability Management, Application Security

1 Month ago • 6-8 Years • Cyber Security

Job Summary

Job Description

As a Security Engineering Manager for Canva's Vulnerability Management team, you will lead a team dedicated to identifying, assessing, and automating the resolution of security vulnerabilities across Canva's global ecosystem. Responsibilities include driving delivery of Application Security solutions, supporting a security-first engineering culture, making secure solutions easy for engineering teams, driving technical decision-making, fostering communication across teams, and investing in engineer growth and development. You'll also be involved in hiring, coordinating across business units, and delivering large cross-team initiatives. The role requires experience leading engineering or security teams, hands-on technical leadership, cloud-based environment expertise (AWS, GCP, Azure), deep understanding of vulnerability management practices, and strong communication skills. The team uses a build-versus-buy approach to deliver robust capabilities.
Must have:
  • Lead engineering/security teams
  • Hands-on technical leadership
  • Cloud experience (AWS, GCP, Azure)
  • Deep understanding of vulnerability management
  • Strong communication skills
Good to have:
  • AWS expertise
  • Automation experience for security solutions
  • Experience with vulnerability management at scale
Perks:
  • Equity packages
  • Inclusive parental leave
  • Annual Vibe & Thrive allowance
  • Flexible leave options

Job Details

Job Description

Join the team redefining how the world experiences design.

Hey, g'day, mabuhay, kia ora, 你好, hallo, vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point.

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work, we trust our Canvanauts to choose the balance that empowers them and their team to achieve their goals.

What you’d be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start, but this will likely evolve.

At the moment, this role is focused on:

  • Drive delivery of Application Security solutions for our large-scale, cloud-native and SaaS application stack, from ideation to completion within start-up time frames, to securely support Canva’s rapid growth
  • Support a security-first engineering culture by making the optimally secure solution the easiest one for software engineering teams to use 
  • Drive technical decision making support to your team in a fast-paced, innovation-focused environment
  • Foster a culture of communication, bridging the communication gap between teams, groups, and company leaders
  • Invest in working with engineers on growth and development opportunities to help further their skillset and grow into new roles, with an ability to deliver relevant and timely feedback (positive & constructive) to help them to continuously improve and learn
  • Be involved in hiring; build and grow high-performing and highly engaged teams of world-class engineers by attracting, interviewing, and selecting talent for your group
  • Coordinate across various specialties and parts of the business to understand the impact and feasibility of strategic goals within the group, and how that impacts your own roadmap.
  • Drive delivery of large, cross team and cross group initiatives and projects from ideation to completion.

You're probably a match if

  • You’ve led engineering or security teams and love growing people from all levels, while scaling systems.
  • You’re a technical hands on leader (with previous experience as a Software or Security engineer), who is comfortable getting into the thick of it when needed using software engineering fundamentals and security first principles to guide technical decision making
  • Previous experience in cloud-based environments (AWS, Google Cloud, Azure) with a working knowledge of broad infrastructure functions - CI/CD pipelines, automation, site reliability etc.
  • You bring deep understanding of vulnerability management practices — across infrastructure, application security, and cloud environments.
  • You’re comfortable working with ambiguity, designing programs, and influencing beyond your immediate team.
  • You can communicate clearly with technical and non-technical audiences and love turning complex problems into simple, effective solutions.
  • Experience making careful engineering tradeoffs, particularly around "Build vs Buy", evaluating potential third party systems to partner with, and managing and working with vendors to meet Canva's business needs
  • Strong customer focus to understand the use cases and requirements of internal stakeholders, and identify opportunities to empower them to do their best work

While not required, you’ll have an edge if you bring:

  • Subject-matter expertise of Amazon Web Services and associated technologies and products within the AWS ecosystem
  • Previous experience leading teams to scale security solutions through automation, continuously reducing the tax that security requirements can impose on software development and operations
  • Experience working on delivering vulnerability management at scale in a fast paced, rapid growth environment

About the role

As a Security Engineering Manager for the Vulnerability Management team, you’ll lead a team dedicated to identifying, assessing, and automating the resolution of security vulnerabilities across Canva’s global ecosystem. Your mission is to empower engineers with the tools and context they need to make secure decisions by default—making the secure path the easiest path. We need to be able to ship robust and secure features without sacrificing speed and scale of delivery.

Our Vulnerability Management team takes a strategic, build-versus-buy approach to deliver robust capabilities that offer visibility, early detection, and actionable insights. We're focused on reducing toil, abstracting away complexity, and driving remediation at scale—so product teams can focus on building, not fixing. You'll guide engineers as they develop and scale security solutions, navigate complex problem spaces, and balance security rigor with Canva's pace of innovation.


About the Security Group

The Security Group’s mission is to protect our community, people, and company from online threats by making the most secure actions simple. Our teams work together, and with other groups, to deliver preventive and detective controls and processes that reduce security risk. The group runs programs across Identity and Access Management, Application Security, Risk Management, and Threat Detection and Response domains.  Within this group, the Vulnerability Management team ensures we’re proactively identifying and reducing risk across Canva’s systems and codebase. We partner deeply with product teams and platform engineers — building shared tooling, defining scalable processes, and helping Canva grow securely.

What's in it for you?

Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a range of benefits to set you up for every success in and outside of work.

Here's a taste of what's on offer:

  • Equity packages - we want our success to be yours too
  • Inclusive parental leave policy that supports all parents & carers
  • An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
  • Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally

Check out lifeatcanva.com for more info.

Other stuff to know

We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

We celebrate all types of skills and backgrounds at Canva so even if you don’t feel like your skills quite match what’s listed above - we still want to hear from you!

Please note that interviews are conducted virtually.

Similar Jobs

Canva - Senior Manager, Revenue Operations

Canva

Los Angeles, California, United States (Remote)
2 Months ago
Canva - Corporate Accounting Lead

Canva

San Francisco, California, United States (Remote)
3 Months ago
Canva - Software Engineer (Python) - Data Platform (Open to remote across ANZ)

Canva

Auckland, Auckland, New Zealand (Remote)
5 Months ago
Rackner - Business Development & Capture Associate

Rackner

(Remote)
2 Weeks ago
Canva - Senior Backend Engineer (Java)

Canva

Sydney, New South Wales, Australia (Remote)
4 Months ago
Google - Pursuit Lead II, Financial Services, Google Cloud Consulting

Google

Cambridge, Massachusetts, United States (On-Site)
1 Month ago
NVIDIA - Senior Networking Security Research Architect

NVIDIA

Tel Aviv-Yafo, Tel Aviv District, Israel (On-Site)
3 Months ago
The Walt Disney Company - Ship Investigation Manager

The Walt Disney Company

(On-Site)
1 Month ago
bytedance - Global Head of Solution Architect, SealSuite

bytedance

Singapore (On-Site)
4 Months ago
PwC - IN-Manager_AWS Engineer_Advisory Corporate_Advisory_Bangalore

PwC

Bengaluru, Karnataka, India (On-Site)
8 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Canva - Frontend Software Engineer

Canva

Melbourne, Victoria, Australia (Remote)
1 Month ago
Canva - Senior Frontend Engineer - Content Permissions & Sharing

Canva

Auckland, Auckland, New Zealand (Remote)
2 Months ago
Canva - Revenue Operations Manager

Canva

Austin, Texas, United States (Remote)
1 Month ago
facepunch - Recruitment & Training Staff

facepunch

Hanoi, Vietnam (On-Site)
3 Weeks ago
Canva - Germany Country Manager

Canva

Berlin, Berlin, Germany (On-Site)
4 Days ago
Daxko - Public Relations and Communications Intern

Daxko

Birmingham, Alabama, United States (On-Site)
2 Weeks ago
Canva - Senior Frontend Engineer - Developer Experience

Canva

Brisbane, Queensland, Australia (Remote)
6 Days ago
Canva - Staff Data Scientist - Marketing Research & Data

Canva

Surry Hills, New South Wales, Australia (Remote)
2 Months ago
Lingopanda (previously PingoLearn) - Visual & Design Lead

Lingopanda (previously PingoLearn)

Bengaluru, Karnataka, India (On-Site)
8 Months ago
Scale AI - Staff AI Product Manager

Scale AI

Doha, Doha Municipality, Qatar (On-Site)
2 Weeks ago

Get notifed when new similar jobs are uploaded

Jobs in Melbourne, Victoria, Australia

Canva - Machine Learning Engineer Lead - User Voice

Canva

Melbourne, Victoria, Australia (Remote)
1 Month ago
Penumbrainc - Customer Service Representative & QA Specialist

Penumbrainc

Sydney, New South Wales, Australia (On-Site)
1 Week ago
Immutable - VP of Growth, Performance

Immutable

Sydney, New South Wales, Australia (Hybrid)
1 Month ago
Riot Games - Junior Linux Systems Engineer (Game Operation)

Riot Games

Sydney, New South Wales, Australia (Remote)
1 Month ago
Big Ant Studios - Character Artist

Big Ant Studios

Adelaide, South Australia, Australia (On-Site)
7 Months ago
Canva - Staff Backend Engineer - Product Insights Enablement - Java

Canva

Sydney, New South Wales, Australia (Remote)
3 Months ago
VGW - Senior Software Engineer

VGW

Sydney, New South Wales, Australia (On-Site)
2 Weeks ago
Telastra - Staff Software Engineer (Pega Infra)

Telastra

Australia (On-Site)
1 Week ago
easygo - CRM Coordinator

easygo

Melbourne, Victoria, Australia (On-Site)
1 Week ago
Nine - Sound Recordist / Audio Operator

Nine

Mount Coot-Tha, Queensland, Australia (On-Site)
2 Weeks ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

bytedance - Security Engineer, Anti-DDoS

bytedance

Singapore (On-Site)
2 Months ago
Tesla - Security Operations Center (SOC) Operator

Tesla

Milton Keynes, England, United Kingdom (On-Site)
3 Months ago
Appirits - Security Engineer

Appirits

Shibuya, Tokyo, Japan (Hybrid)
2 Months ago
bytedance - Technical Account Manager (Edge Cloud)

bytedance

Boston, Massachusetts, United States (On-Site)
2 Months ago
Ion - Intermediate IT Auditor, Italy

Ion

Collecchio, Emilia-Romagna, Italy (On-Site)
7 Months ago
Ion - Network Security Engineer

Ion

Castellazzo Bormida, Piedmont, Italy (Hybrid)
7 Months ago
Trend Micro - Embedded Software Engineer (C/C++)

Trend Micro

Manila, Metro Manila, Philippines (On-Site)
16 Years ago
Rackspace Technology - SOC Lead (Sentinel experience required)

Rackspace Technology

India (Remote)
4 Months ago
PwC - Associate - Enterprise System and Transformation Assurance

PwC

Jakarta, Jakarta, Indonesia (On-Site)
8 Months ago
PwC - Senior Security Engineers (Entra ID/AD)

PwC

Sofia, Sofia City Province, Bulgaria (On-Site)
8 Months ago

Get notifed when new similar jobs are uploaded

About The Company

Austin, Texas, United States (Hybrid)

Austin, Texas, United States (Remote)

Auckland, Auckland, New Zealand (Remote)

Auckland, Auckland, New Zealand (Remote)

Sydney, New South Wales, Australia (Remote)

Berlin, Berlin, Germany (On-Site)

Cairo, Cairo Governorate, Egypt (Remote)

Auckland, Auckland, New Zealand (Remote)

Brisbane, Queensland, Australia (Remote)

Brisbane, Queensland, Australia (On-Site)

View All Jobs

Get notified when new jobs are added by Canva

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug