Senior Security Engineer, Detection and Response
Company: Monarch Money
Location: Canada (Remote)
Type: Full-time
Remote: Yes
Posted: 2026-05-18
About this role
### About Us:
Monarch is a powerful, all-in-one personal finance platform designed to help make the complexity of finances feel simple again. Since launching in 2021, we’ve become the top-recommended personal finance app by users and experts. Our goal? To take the stress out of finances so our members can focus on what truly matters.
We are a team of do-ers led by experienced entrepreneurs who are passionate about helping our members reach their financial goals. We are hyper focused on building a product people love and continuing to evolve based on user feedback.
As a fully remote company (even before COVID!), we welcome applicants from almost anywhere. Our team collaborates synchronously mostly from 9 AM – 2 PM PT and embraces asynchronous work to stay connected across time zones.
Join us on our mission to transform lives by simplifying money, together.
The Role:
Monarch is hiring a Senior Security Engineer, Detection and Response to join our Security team within Foundations — the first dedicated hire for this function. Reporting to the TLM of the Corporate & Infrastructure Security squad, you will build detection, automation, and response capabilities while working with IT to harden the tools people use every day.
What makes this role different is the AI mandate. Monarch is genuinely AI-first, and we expect you to bring that mindset to the security engineering team — using LLM-augmented workflows to accelerate detection authoring, automate phishing triage, analyze logs, and build internal tooling. You'll also be responsible for governing the enterprise AI platforms themselves (e.g. Claude, OpenAI) as corporate security surfaces. If you've been waiting for a security role where AI fluency isn't a nice-to-have but a core expectation, this is it.
You'll join a lean, senior security team that has strong foundations already in place — SOC 2 Type 2 complete, best in-class tooling — and you'll build the next layer of security maturity on top of that....