Senior/Lead Application Security Engineer - Remote

Overview

At BioRender, we’re on a mission to accelerate the world’s ability to learn, discover, and communicate science — transforming how knowledge is shared and making science open, collaborative, and easily understandable by all.

In Short

• Drive ongoing improvements for SSDLC, bug bounty, and the application stack.
• Manage the ongoing application security program, including application risk assessments.
• Integrate CI/CD processes with SAST/DAST tools.
• Perform code reviews for NodeJS and React applications.
• Identify and remediate application security vulnerabilities.
• Conduct Bug Bounty issue evaluations and recommendations.
• Test application code using the OWASP methodology.

Requirements

• Expertise in web application security and best practices.
• Ability to perform code reviews on NodeJS and React.
• Knowledge of SAST/DAST system integration and maintenance.
• Experience with Secure Software Development Life Cycles.
• Applied knowledge of cryptography, PKI, and TLS.
• Experience with threat modeling and common code and network vulnerabilities.

Benefits

• Mission-driven work focused on improving scientific communication.
• High employee satisfaction with a world-class NPS.
• Backed by top investors and accelerators like Y Combinator.
• Remote-first work culture with flexibility.