3 months ago
Remote, CanadaSenior
Responsibilities
- Contribute production-quality code and security hardening directly to the Node.js/React application and Python/Terraform infrastructure.
- Build and maintain security and CI/CD automation tooling and integrate SAST, DAST, SCA, and secrets scanning into the Secure SDLC.
- Define secure-by-design patterns for authentication, authorization, and API security, and review RFCs and design documents.
- Lead threat modeling and translate findings into shipped security controls.
- Secure AI-integrated product features against prompt injection, data leakage, and excessive tool, token, and data access.
- Perform penetration testing and OWASP-based code reviews, remediate application vulnerabilities, and operate the HackerOne bug bounty program end to end.
- Automate recurring security work and contribute to SOC 2 control design and audit readiness.
Requirements
- Demonstrable software engineering ability with production codebase experience, particularly Node.js and React; Python experience is a plus.
- Fluency with AI coding assistants and agentic development workflows, including understanding of the security risks they introduce.
- Expertise in web application security, secure coding, code review, and application security findings.
- Experience integrating and maintaining SAST/DAST systems within CI/CD and working with Secure Software Development Life Cycles.
- Hands-on experience securing AWS cloud workloads and using Terraform or equivalent infrastructure-as-code; Cloudflare familiarity is a plus.
- Experience with threat modeling and common code and network vulnerability types, impacts, and remediation.
- Applied knowledge of cryptography, PKI, and TLS.
- Experience hardening LLM-integrated or AI-powered production features, operating a bug bounty program, or contributing to SOC 2 readiness is preferred.
- Relevant certifications such as OSCP, OSWE, or AWS Security Specialty are valued but do not substitute for engineering ability.
Benefits
- Remote-first work arrangement with flexibility to work from anywhere in Canada or the United States.
- Mission-driven, collaborative work focused on improving scientific communication and accelerating scientific discovery.
- Opportunity to work on products used by millions of people in more than 200 countries.
- Inclusive Equal Opportunity Employer committed to diversity.
About BioRender
BioRender builds a browser-based design platform that lets scientists create accurate figures, schematics, and posters using a curated library of biological icons and templates. It sells its software as a subscription to researchers, labs, and life-science organizations, with enterprise features for teams and institutions. Founded in 2017 and headquartered in Toronto, the privately held company focuses on science communication tools used across academia, biotech, and pharma.