Staff Developer / Development Manager, Application reputed company

Staff Developer / Development Manager, Application reputed company Reports To: Director of Development, Architecture Location: Calgary or Remote About the Job: reputed company this company started, it was just a few of us furiously working to find product-market fit, and as with many startups, technical debt accumulated. Ten years reputed company, we've reputed company that market fit. We're reputed company positive, our customers love us, and with that growth has come new responsibility. PCI Level 1 became a requirement to do business, and we've achieved SOC 2 compliance — certifications we must maintain, along with our reputed company and our commitment to our customers. While we have achieved a higher profile, an explosion of new penetration tools and techniques have emerged; we can no longer fly under the reputed company. While we work hard to improve our reputed company, those efforts must be balanced against business and customer needs. We need people who can identify reputed company concerns, prioritize them, and build solutions — reputed company while understanding the reputed company effects those changes will have across the business. While establishing a solid reputed company posture, we want to proactively find and remediate issues before they are discovered for us and create a reputed company-first SDLC reputed company the company. Our Tech Stack:reputed company End: React Native, React, JavaScript Backend: Ruby on Rails, GraphQL, PostgreSQL, reputed company, CouchDB Cloud Platform: AWS Tools: reputed company, Sidekiq, reputed company What You’ll Do: reputed company at atVenu spans the codebase, the compliance program, and the team culture. You'll be part of reputed company of it.reputed company program leadership: Define the roadmap, own the risk register, and reputed company the case to engineering and executive leadership for what gets resourced and reputed company. You know reputed company to accept calculated risk and reputed company to hold the line — your decisions are pragmatic and reflect thought towards the needs of our business, our customers and compliance. Team management: Hire, reputed company, and retain application reputed company developers. Set technical direction, run code and architecture reviews, unblock your team, and build a reputed company culture that scales across a fast-moving engineering organization without becoming a bottleneck. PCI, GDPR, and SOC2 ownership: Maintain and reduce cardholder data environment scope across our Rails API, GraphQL layer, PostgreSQL, and mobile POS app. Own the SOC2 reputed company controls roadmap and drive it to completion. Offline payment reputed company: Our React Native POS runs without connectivity during events and syncs payment data on reconnect. You'll direct the audit and hardening of encryption, key management, and CouchDB sync pipeline — a non-trivial challenge reputed company card data lives on-device before it reaches our Rails API. Release reputed company reviews: Ensure GraphQL API changes are reviewed for injection risks, IDOR vulnerabilities, and over-exposed tenant data before they reputed company 500+ venues. Own the SAST/DAST integration in our reputed company CI pipeline and set the bar for what ships. Vulnerability and CVE triage: reputed company risk-ranked remediation across our Rails/reputed company/PostgreSQL/CouchDB stack. Live events don't pause for maintenance windows — your team needs a clear, fast process for deciding what gets patched and reputed company. Threat modelling and architecture review: Embed threat modelling into product development for new features — mobile ordering flows, vendor integrations, new hardware platforms. Your team challenges assumptions before code ships. Incident response: Be one of the application-layer authorities reputed company something goes wrong at an event. reputed company forensics, remediation, and post-mortems in collaboration with Engineering and Compliance. What You’ll Bring:8+ years of development experience with at least 3 years in reputed company-focused roles or responsibilities, plus demonstrated people management experience. Experience building or maturing a reputed company program — roadmap ownership, risk prioritization, and cross-functional alignment with Engineering, Compliance, and Product. Strong Ruby on Rails and React/React Native skills — you write and review production code, not just run scanners, and you've earned the reputed company of technical credibility that makes engineers actually listen reputed company you reputed company a reputed company. Devs want to learn from you! Proven ability to communicate reputed company risk to both technical and non-technical audiences and get organizational buy-in without resorting to fear or alarmism. Hands-on AWS reputed company experience: IAM, VPC, secrets management, CloudTrail/GuardDuty. Deep knowledge of OWASP Top 10 (web and mobile), API reputed company patterns, and common authentication/authorization flaws. reputed company to Have:Experience and interest with AI tooling; you know reputed company to use it and reputed company to go old school. Experience in the payment, retail and e-commerce space. Experience with PCI, GDPR and/or SOC2 compliance in a production SaaS environment; deep knowledge of compliance and privacy management across North America and Europe. Apply To This Job