Staff, Security Engineer
Fullscript3 months ago
Toronto, Canada +3 moreStaff+
Responsibilities
- Design and implement security solutions across applications, platforms, and AI-powered systems.
- Partner with engineering teams on architecture reviews, threat modeling, secure coding practices, and design reviews.
- Drive application security, product security, and vulnerability management initiatives from concept through implementation.
- Own complex security challenges spanning multiple teams, systems, and domains.
- Mentor engineers and security practitioners and promote secure software development practices.
- Influence technical strategy and security standards through hands-on engineering and cross-functional collaboration.
- Monitor emerging threats, security technologies, and AI-specific risks.
Requirements
- 8+ years of software engineering experience designing, building, and operating production systems.
- 3+ years of recent experience in application security, product security, security engineering, or a related security discipline.
- Deep understanding of secure software development, modern application architectures, APIs, and cloud-native environments.
- Experience owning complex technical initiatives from problem definition through delivery across multiple teams and stakeholders.
- Ability to influence technical direction, mentor engineers, and drive adoption of security best practices.
- Strong hands-on experience with security tooling, automation, vulnerability management, and security assessments.
- Excellent communication skills, technical judgment, and continuous learning mindset.
- Experience securing Ruby on Rails, Node.js, JavaScript, GraphQL, or similar application ecosystems is a bonus.
- Experience with AWS cloud security, cloud-native security controls, STRIDE, PASTA, vulnerability management, application security posture management, developer security tooling, GitHub, GitLab, Wiz, static analysis, secret scanning, penetration testing, security research, ethical hacking, or regulated and sensitive customer data is a bonus.
Benefits
- Remote-first flexibility, with North America and Ottawa, Toronto, or Calgary preferred.
- Flexible paid time off.
- RRSP/401k match and competitive compensation packages.
- Premium benefits with customizable coverage, paramedical services, and a health savings account.
- Fullscript discounts on wellness products.
- Continuous learning opportunities.
- Equal opportunity employer with accommodations available upon request.
Tech Stack
Categories
About Fullscript
Fullscript believes in the power of whole person care and is fully committed to helping all providers deliver it. We help create an ongoing cycle of whole person care by giving providers a single platform that brings together industry-leading labs, clinically effective supplements, and an intuitive suite of tools to promote adherence and outcomes. www.fullscript.com