or apply directly on Forma.ai's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 71 days Forma.ai's roles stay open a median of 80 days
- Reposted
- No
- Salary listed
- No 45% of Forma.ai's roles list one
- Ghost-job risk at Forma.ai
- high 22 stale, 1 reposted of 22 open
- Hiring momentum
- 24 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-22
Measured from postings appearing on and disappearing from Forma.ai's own greenhouse board since 2026-08-03. Full hiring picture for Forma.ai.
About this role
As a Staff Security Engineer at Forma.ai, you will lead efforts to enhance security across the company's applications, cloud infrastructure, and development processes. Your role involves collaborating with various teams to implement security controls, automate processes, and ensure secure software delivery. You will also be responsible for incident response, vulnerability management, and improving security visibility across the organization.
- benefits
- 2/5
- freshness
- 1/5
- career value
- 5/5
- role clarity
- 5/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Forma.ai as an employer.
What you need
- Eight or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
- Strong hands-on experience securing AWS environments, including IAM, networking, encryption, logging, and secrets management.
- Experience with Terraform, Kubernetes, containers, and security controls in CI/CD pipelines.
- Strong understanding of application and API security, authentication, authorization, and multi-tenant SaaS risks.
- Experience with vulnerability management, threat modelling, incident response, and security automation.
- Ability to write scripts using Python, Bash, PowerShell, or a similar language.
Nice to have
- Experience supporting SOC 2, ISO 27001, privacy programs, or enterprise customer security reviews.
- Experience securing analytics platforms, data pipelines, or systems handling sensitive customer data, including row-level, column-level, or attribute-based access controls.
- Experience with AWS security services, EKS, Datadog, Wiz, Snyk, CrowdStrike, or similar tools.
- Experience securing AI applications, large language models, agents, or Amazon Bedrock workloads.
- Experience in a B2B SaaS or high-growth technology company.
What you get
- Meaningful compensation including participation in an employee stock ownership plan.
- Full benefits package including medical, dental, vision, disability and life insurance, and paid parental leave.
- $750 yearly training stipend for learning and development resources.
- Opportunities for career growth as an individual contributor or people leader.
Worth weighing
- No salary listed in the posting.
- The role involves a significant amount of collaboration across multiple departments, which may require strong interpersonal skills.
- The position may evolve into a dedicated security team role, indicating potential changes in responsibilities over time.
Summarised from Forma.ai's posting. Read the full original.
Listed by Forma.ai on their greenhouse job board, last confirmed open on 2026-10-22. PitchMeAI is not the employer.
More roles at Forma.ai
- Account DirectorToronto, Canada
- Staff Back End Engineer (Applications)Toronto, Canada
- Account ExecutiveRemote Canada or Remote USA
- Principal Consultant, Sales EffectivenessRemote Canada or Remote USA