Security Assurance Engineer

At Trust Flight, we are proud to be a global leader in mission-critical software systems and technical services, trusted by the aerospace and aviation industries worldwide. Our innovative solutions power the safety and efficiency of aviation operations, ensuring the safety of hundreds of thousands of passengers and crew every month.

✈️ Our Mission:
To revolutionize aviation by delivering digital workflow solutions that enhance safety, streamline operations, and inspire confidence across the industry.

🚀 Impact:
Over 200,000 users rely on our systems every day for operational safety, compliance management, and mission-critical decision-making.

🚩 Core Values:
Guided by integrity, responsibility, innovation, and excellence, we are committed to empowering our partners to operate with confidence.

Join us in shaping the future of aviation and making an impact through technology.

As a Security Assurance Engineer, you will help ensure Trust Flight’s aviation software and services are secure, resilient, and trustworthy as the company scales globally. This is a hands-on role focused on building and validating security controls that work in practice, not just on paper.

Based in Canada, you will report to the CIO and work closely with Platform, Infrastructure, and Application Engineering teams across multiple time zones. Your work directly supports Trust Flight’s ability to meet regulatory, customer, and aviation-industry security expectations while enabling teams to move quickly and safely.

• Design, implement, and own security solutions, controls, and supporting tools across the platform, infrastructure, and application security surfaces

• Define, implement, and continuously validate security controls, ensuring they are effective in real-world operation, not just on paper

• Take ownership of the Security Information and Event Management (SIEM) capability, ensuring effective security monitoring, investigation, and assurance

• Identify, assess, and prioritize security risks and control gaps, translating findings into concrete technical and operational improvements

• Leverage automation, including AI-assisted techniques where appropriate, to improve security monitoring, control validation, and the efficiency of assurance workflows

• Partner closely with platform, infrastructure, and application engineering teams to embed security into system design, delivery, and operations

• Ensure systems emit the right security-relevant telemetry to support detection, investigations, and evidence-based assurance

• Own the technical implementation of industry security frameworks and certifications (e.g., ISO, SOC 2, CE+), ensuring standards are consistently upheld through practical engineering controls and verifiable evidence

• Support incident reviews and post-incident improvements with a focus on control effectiveness, prevention, and systemic improvement

• 3–5 years of relevant experience in security engineering, platform security, security assurance, or closely related roles.

• Strong understanding of cloud and modern software architectures (e.g., Azure/GCP, containerized environments, CI/CD pipelines).

• Hands-on experience implementing and operating security controls such as logging and monitoring, IAM, vulnerability management, and incident response tooling.

• Practical experience with SIEM platforms and security telemetry (log sources, detection logic, alerting, and investigations).

• Working knowledge of security frameworks and standards (e.g., ISO 27001, SOC
  2), with experience translating requirements into technical controls and evidence.

• Ability to assess security risk pragmatically and communicate findings clearly to both technical and non-technical stakeholders.

• A growth mindset: you are curious, continuously learning, and open to feedback and improvement.

• Strong ownership mentality. You take responsibility for outcomes, not just tasks.

• Comfortable working in a scaling, fast-moving environment with evolving systems and priorities.

• Bachelor’s or Master’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or a related field, or equivalent…