2 months ago
Remote, CanadaSenior
Responsibilities
- Contribute production-quality code and security hardening directly to the Node.js/React application and Python/Terraform infrastructure.
- Build and maintain security and CI/CD automation tooling and integrate SAST, DAST, SCA, and secrets scanning into the Secure SDLC.
- Define secure-by-design patterns for authentication, authorization, and API security, and review RFCs and design documents.
- Lead threat modeling and translate findings into shipped security controls.
- Secure AI-integrated product features against prompt injection, data leakage, and excessive tool, token, and data access.
- Perform penetration testing and OWASP-based code reviews, remediate application vulnerabilities, and operate the HackerOne bug bounty program end to end.
- Automate recurring security work and contribute to SOC 2 control design and audit readiness.
Requirements
- Demonstrable software engineering ability with production codebase experience, particularly Node.js and React; Python experience is a plus.
- Fluency with AI coding assistants and agentic development workflows, including understanding of the security risks they introduce.
- Expertise in web application security, secure coding, code review, and application security findings.
- Experience integrating and maintaining SAST/DAST systems within CI/CD and working with Secure Software Development Life Cycles.
- Hands-on experience securing AWS cloud workloads and using Terraform or equivalent infrastructure-as-code; Cloudflare familiarity is a plus.
- Experience with threat modeling and common code and network vulnerability types, impacts, and remediation.
- Applied knowledge of cryptography, PKI, and TLS.
- Experience hardening LLM-integrated or AI-powered production features, operating a bug bounty program, or contributing to SOC 2 readiness is preferred.
- Relevant certifications such as OSCP, OSWE, or AWS Security Specialty are valued but do not substitute for engineering ability.
Benefits
- Remote-first work arrangement with flexibility to work from anywhere in Canada or the United States.
- Mission-driven, collaborative work focused on improving scientific communication and accelerating scientific discovery.
- Opportunity to work on products used by millions of people in more than 200 countries.
- Inclusive Equal Opportunity Employer committed to diversity.
