> Markdown version of [/jobs/ext/2070837-security-software-engineer-ai-automation-canada](https://www.wearedevelopers.com/jobs/ext/2070837-security-software-engineer-ai-automation-canada). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Software Engineer, AI & Automation - Canada - **Company:** NerdWallet, Inc. - **Location:** San Francisco, CA, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Confluence, JIRA, User Authentication, Build Automation, Cloud Computing, Software Quality, Code Review, Distributed Systems, Github, Python (Programming Language), NoSQL, Queueing Systems, Redis, Search Technologies, Security Software, Software Engineering, Data Streaming, Data Processing, Large Language Models, Multi-Agent Systems, Software Security, Caching, Generative AI, Indexer, Backend, Rate Limiting, Kubernetes, Slack, Build Tools, Restful APIs, Stream Processing, Data Pipelines, Serverless Computing, Vulnerability Analysis - **Published:** August 15, 2026 - **Apply:** https://arc.dev/remote-jobs/j/redirect/pb8vnj3iw4 ## About the Role * 3+ years of software engineering or security engineering experience * Strong proficiency in Python or Go for building production-grade backend services, APIs, and data pipelines; comfort moving between languages is expected * Experience building and maintaining backend services including REST APIs, authentication, authorization, rate limiting, streaming, and observability * Working knowledge of application security concepts including common vulnerability classes such as injection, broken authentication, cross-site scripting, insecure authorization, and secrets exposure; experience with threat modeling and SSDLC practices * Hands-on experience building AI-powered systems using LLM APIs, including retrieval-augmented generation (RAG) pipelines, multi-agent architectures, and semantic search; working understanding of AI-specific security risks such as prompt injection, sensitive data exposure, and secure handling of model inputs and outputs * Genuine interest in AI and how it applies to security, not just as a tool to use, but as a domain to understand deeply, including its limitations and risks * Experience developing and operating distributed systems and cloud-based environments, including message queues, NoSQL databases, AWS, containers, Kubernetes or ECS, serverless, and infrastructure as code * Understanding of caching and performance patterns including Redis, semantic caching, TTLs, and cache invalidation * Strong communication skills, able to explain complex AI and security concepts clearly to both technical and non-technical audiences, and confident advising stakeholders on tradeoffs and limitations ## Description In this role, you'll partner closely with security engineering and infrastructure teams to build automation and AI-powered solutions that help identify vulnerabilities, improve security reviews, and reduce risk across our platforms. You'll take ownership of security engineering initiatives that combine software development, AI systems experience, and security-first thinking to solve meaningful problems at scale. You'll have room to bring new ideas, influence how AI and automation practices evolve at NerdWallet, and shape the future of security tooling within a team that values curiosity, informed risk-taking, and thoughtful problem-solving. This role reports to the AI Security Manager. Projects you may be working on in this position include: * Designing and building multi-agent LLM systems and routing logic that automate threat modeling, security design review, policy Q&A, and vulnerability analysis at scale * Developing retrieval-augmented generation (RAG) pipelines and semantic search systems across large code and documentation repositories * Creating automated code review capabilities that help identify insecure patterns and improve software quality earlier in the development lifecycle * Designing integrations with tools such as GitHub, Slack, Jira, Confluence, and cloud platforms to embed security guidance into everyday engineering workflows * Developing REST APIs and platform services with authentication, authorization, rate limiting, observability, and secure handling of sensitive data * Designing and maintaining scalable data processing pipelines for large codebases and document repositories, including extraction, indexing, stream processing, batch jobs, and parallel execution * Improving AI application security through controls such as prompt injection prevention, sensitive data filtering, supply chain security, and secure handling of model inputs and outputs * Enhancing NerdWallet's secure software development lifecycle (SSDLC) through automation, tooling, and developer-friendly security practices * Partnering with engineering teams to prioritize and remediate application and infrastructure security risks * Supporting incident response and on-call needs by contributing security engineering expertise, tooling, automation, and analysis when security issues arise * Identifying new opportunities for automation and AI augmentation across the security team, bringing fresh eyes and independent thinking to a growing backlog of high-impact work Where You Can Make An Impact * Serve as technical lead on high-priority initiatives, taking ownership of technically complex work and collaborating across teams to deliver practical, measurable security outcomes * Help shape how AI and automation are securely adopted across NerdWallet's engineering ecosystem * Build tools and platforms that make security more accessible, scalable, and actionable for development teams * Improve the speed and quality of security reviews through thoughtful automation and security-first design * Strengthen customer trust by helping protect NerdWallet's products, systems, and sensitive data * Serve as an internal subject matter expert on AI and automation, advising on appropriate use cases, limitations, and risks to both technical and non-technical stakeholders ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Reducing LLM Calls with Vector Search Patterns - Raphael De Lio (Redis)](https://www.wearedevelopers.com/videos/1714-reducing-llm-calls-with-vector-search-patterns-raphael-de-lio-redis) - [Stack Overflow: Community and AI](https://www.wearedevelopers.com/videos/600-stack-overflow-community-and-ai) - [The New AI Security Stack: Observe, Detect, Protect](https://www.wearedevelopers.com/videos/100302-the-new-ai-security-stack-observe-detect-protect) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Are Software Engineer Wages Being Pushed Down? A Report on Tech Salaries](https://www.wearedevelopers.com/magazine/417-are-software-engineer-wages-being-pushed-down-a-report-on-tech-salaries) - [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What is Software Engineering in the Age of AI?](https://www.wearedevelopers.com/magazine/640-what-is-software-engineering-in-the-age-of-ai)