Principal Security Engineer

Canada - Toronto; Remote Canada

Conga

Conga delivers a Revenue Advantage to +10K customers and 6.4M users around the globe. CPQ, CLM, and document automation together on a single platform.

View all jobs at Conga

Apply now Apply later

A career that’s the whole package!

At Conga, we’ve built a community where our colleagues can thrive. Here you’ll find opportunities to innovate, support for growth through individual and team development, and an environment where all voices can be heard.

Conga crushes complexity within an increasingly complex world. With our revenue lifecycle management solution, we transform your unique complexities for order configuration, execution, fulfillment, and contract renewal processes with a single critical insights data model that adapts to ever-changing business requirements and aligns the understanding and efforts of every team.

Our mission: Empower customers to deliver transformational revenue growth by aligning teams, processes, and technology to maximize customer lifetime value.

Our approach is grounded in the Conga Way, a framework for what we stand for and everything we do as an organization — from hiring to decision making and product development. Developed with direct input from our colleagues, the Conga Way is the foundation for our culture.

Principal Product Security Engineer

Reports to: VP of Cloud Operations

 

A quick snapshot

We’re looking for a seasoned security expert to lead the charge in securing our cloud-native, microservices-based SaaS platform. As the Principal Product Security Engineer, you’ll serve as the DevSecOps subject matter expert, driving the design and implementation of secure architectures that protect the data of over 11,000 customers worldwide.

 

Why it’s a big deal…  

Security is at the heart of everything we do. In this role, you’ll play a pivotal part in safeguarding our customers’ data and ensuring the integrity of our platform. Your expertise will directly impact our ability to deliver secure, reliable, and scalable solutions.

 

 

Are you the person we’re looking for?  

Extensive Experience & Technical Expertise

  • 10+ years of hands-on experience in cloud security posture management and securing cloud-native environments.
  • Deep understanding of modern deployment patterns including Kubernetes, CI/CD pipelines, DevOps practices, and AI-driven security solutions.
  • Proven leadership in security design reviews, especially during transitions from monolithic to microservices architectures.
  • Strong background in conducting comprehensive security assessments of SaaS applications across AWS, Azure, GCP, or IBM Cloud.
  • Ability to influence and guide cross-functional teams, including engineering and business stakeholders.
  • Skilled in developing and maintaining security documentation aligned with compliance standards and industry best practices.
  • Proficiency in at least one programming or infrastructure-as-code language (e.g., Python, Terraform) to build secure, scalable systems.

 

Resourceful & Collaborative.At Conga, we achieve together-- when you have questions, you find answers; when you’re faced with obstacles, you find solutions. You turn to a variety of resources, including your colleagues, professional network, Internet, articles, books -- whatever helps you get the job done. Then you apply that knowledge across the business where it makes sense.  

 

Experienced & Insightful.You’re well beyond entry-level, but still developing your professional expertise. You regularly rely on policies and procedures to resolve a variety of issues. You’ve worked on problems that required you to review a variety of factors in order to understand a situation. You’ve built productive internal and external working relationships. And you’ve demonstrated good judgment to identify appropriate courses of action, within defined practices and procedures. 

 

Action-Oriented with a Sense of Urgency. You’re able to understand the business priorities and can understand the importance to act fast when an issue arises. When you notice a problem and see an issue, you evaluate the risk and act accordingly – that could be solving the problem or bringing it to the attention of others when you can’t.

 

 

Here’s what will give you an edge…

Willingness to outside of standard business hours. Let’s face it – monitoring security is a 24/7 need. As a global company with global customers, the ability to work in the early mornings, evenings, and weekends is important to ensure we provide the best security for our customers.

 

Education and certifications.  A Bachelor’s degree in Computer Science or a related field would be beneficial Additional cloud certifications, security certifications, and other formal certifications would also be a plus. 

 

Industry expertise. Let’s face it, understanding of Software as a Service and/or Revenue Lifecycle Management software (CPQ & CLM) would allow you to hit the ground running.  

 

#LI-CJC

#LI-Remote

 

 

Did we pique your interest?  

If this sounds like the kind of job you would love in the kind of environment where you would thrive, please click apply. We'd love to hear from you! 

 

Preferred Resume Format 

We accept resumes in any format, we suggest using PDF or plain text. These formats help ensure that your resume’s formatting remains intact, making it easier for our recruiters to review your application promptly. 

 

Don’t meet every requirement for the role? 

Studies have shown that women and members of ethnic minorities are less likely to apply to jobs unless they meet every single qualification. At Conga we are dedicated to building a diverse, inclusive, and authentic workplace, so if you’re excited about this role but your experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You just might be the right candidate for this or other roles.  

 

 

Additional Information

Conga is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. We understand interviewing can be stressful for those with disabilities. If reasonable accommodation is needed to allow you to show us your best self, please let your recruiter know as soon as possible. All your information will be kept confidential according to EEO guidelines. Conga is not open to third party solicitation or resumes for our posted FTE positions. Resumes received from third party agencies that are unsolicited will be considered complimentary.

 

Conga's Applicant Privacy Statement 

The information you provide during the application process will be used in accordance with Conga’s Applicant Privacy Statement (https://conga.com/applicant-privacy-statement). By submitting your application, you acknowledge and agree to the terms outlined in this privacy statement.

 

 

Apply now Apply later

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  4  1  0

Tags: AWS Azure CI/CD Cloud Compliance Computer Science CSPM DevOps DevSecOps GCP Kubernetes Microservices Monitoring Privacy Product security Python SaaS Security assessment Terraform

Perks/benefits: Career development

Regions: Remote/Anywhere North America
Country: Canada

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.