About Forma.ai: Forma.ai is a Series B startup that's revolutionizing how sales compensation is designed, managed and optimized. We handle billions in annual managed commissions for market leaders like Edmentum, Stryker, and Autodesk. Our growth has been fuelled by our passion for fundamentally changing and shaping how companies use sales intelligence to drive business strategy. We’re welcoming equally driven individuals who are excited about creating something big! The Opportunity As a Staff Security Engineer, you will be a hands-on technical leader strengthening security across Forma's application, cloud infrastructure, development lifecycle, internal systems, and incident-response practices. Security today is shared across Engineering and DevOps. You'll work closely with both teams and have real room to shape how Forma approaches security as we grow. Depending on your interests and the needs of the business, the role could develop into a deeper individual-contributor position or help build a dedicated security team. You'll work directly with Engineering, DevOps, IT, Product, Legal, and Privacy to identify risks, design practical controls, automate security processes, and help teams ship secure and reliable software. What you'll do Cloud and infrastructure security Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries. Embed security requirements into Terraform and other Infrastructure as Code, and improve secrets, certificate, encryption-key, and credential management. Build automated checks for insecure configurations, excessive permissions, exposed resources, and configuration drift across Kubernetes, containers, serverless workloads, networking, and data services. Application, data, and AI security Run threat modelling and security architecture reviews for new products, services, APIs, data pipelines, and third-party integrations
Role overview
Job description
As an AI Security Engineer , you will work at the intersection of software engineering, cybersecurity, and artificial intelligence. You will design and build security tools, assess AI-powered applications for vulnerabilities, evaluate third-party and open-source AI technologies, and help establish secure development standards for AI systems. This is a hands-on engineering role for someone who enjoys building solutions, solving complex technical problems, and exploring emerging security risks across technologies such as Generative AI, RAG, and agentic systems. What You'll Do Design, build, and implement tools for AI security testing, penetration testing, red teaming, and continuous vulnerability assessment. Develop mock and test AI applications to evaluate internal and third-party AI security solutions. Identify and assess security risks within AI-enabled applications and workflows. Dev
…What they are looking for
Skills & requirements
Qualification
Understanding of modern AI application architectures, including Retrieval-Augmented Generation (RAG), LLM-based applications, and agentic systems; Hands-on experience assessing the security of Generative AI or LLM-based applications; This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact
Department · Tech & Engineering

Hiring company
Capco
Capco is a global management and technology consultancy dedicated to the financial services and energy industries.
Related opportunities
Similar active roles
Relevant, currently active roles for this market.
C$136K – C$187K/yr
C$136K – C$187K/yr
C$156.8K – C$206.8K/yr
🔔 Get job alerts
New AI Security Engineer jobs in Toronto, Ontario, Canada, straight to your inbox.
No spam · Unsubscribe anytime