Careers / Engineering

Senior Software Engineer, Platform Security

Remote, CanadaFull-time

You'll write the product with us, and make sure what ships is safe. This is a hands-on role: you'll ship features, integrations and pipeline code every week, alongside a team that codes every day. You'll also own what most early teams leave to chance: review, releases and keeping production healthy.

Apply by email

About Sabia

Sabia shows companies what their AI actually costs and what it actually produces. Every team now runs Claude Code, Codex, Cowork and a dozen other agents. Finance sees the invoice, but nobody can say which work it bought. Sabia connects the bill to the output: the session, the pull request, the Google Doc, the person and the team.

We're technical, and we write the code ourselves. We build with AI agents every day, so we know how much they can write and how little of what they write is checked. Sabia is heading into paid pilots. Whoever joins will help shape the product, and can look at it and say “this is mine now”.

Who we’re looking for

We're not hiring a résumé. We want someone a bit unusual, who is all in.

  • Owners, not ticket-takers. You notice the thing that has been quietly broken. You fix it, and then make sure it can't happen quietly again.
  • Curious about where AI is really going. You have strong opinions about agents, and some of them come from getting burned.
  • Allergic to vague. You would rather give the exact number than say “there were some issues”.
  • Comfortable with no map. You don't wait for a playbook. You write the first version.
  • Here for the long haul. We want people who want to build the company, not just do a job at one.

What you'll own

  • Building the product. Features end to end, from the Postgres schema to the Next.js page. Integrations with the AI tools companies use, like Claude Code, Codex and Google Drive. The ingestion pipeline that turns that usage into cost and output data. You write real code every week, not only review it.
  • Production. Uptime, alerting and incident response. When something breaks at 2am, you're the first to know, and you write a postmortem we actually act on.
  • Releases. You make shipping safe and boring: expand, deploy, then contract, with guards that don't depend on anyone remembering.
  • The data layer. Postgres with row-level security (RLS), tenant isolation, an append-only cost ledger and encrypted credential storage. You review every migration and every RLS policy, and you can say exactly why a query plan got slow.
  • Review. You review alongside the rest of engineering, with the final say on migrations and RLS. You know when to merge and when to stop something that is wrong in a way nobody has noticed yet.
  • Security and compliance. You lead the technical side of SOC 2: access control, logging, secrets, and the evidence auditors ask for.

You probably have

  • 6+ years as a software engineer shipping product, including on-call for what you built.
  • Strong, fast TypeScript and Node. Our stack is Next.js (App Router, React Server Components), Supabase, Vercel and GitHub Actions.
  • Things you built end to end that real people used. Show us the code if you can.
  • Deep Postgres: schema design, RLS, query plans, locking, migrations on live data.
  • Security instincts: tenant boundaries, secrets, least privilege. Bonus if you've been through a SOC 2 audit.
  • Opinions about AI coding agents from daily use, including where you don't trust them.

This is not for you if

  • You want a clear spec for every task.
  • You only want to write features, or only want to run infrastructure. This role is both.
  • “Production is my responsibility” sounds like a burden rather than the point.

How we'll hire

  1. A 30-minute call with our team.
  2. A paid, async take-home in two parts: build a small feature on a slice of our codebase, then review a real PR from our history that had a subtle bug.
  3. Half a day with our engineering leadership: pairing on real code, an incident walkthrough and a design conversation.
  4. References, then an offer.

Apply

Email hello@sabiapartners.ca with “Application: Senior Software Engineer, Platform Security” in the subject line. Tell us a bit about yourself, and link to your work if you can. We read every one.