Lead Security Engineer - Remote

Overview

Fullscript is seeking an experienced Lead Security Engineer to lead and mature security initiatives, ensuring a modern and secure user experience while managing risks effectively.

In Short

• Drive security initiatives from design to implementation.
• Utilize threat models to inform application design decisions.
• Conduct security code reviews to validate vulnerabilities.
• Triage application vulnerabilities and recommend remediation strategies.
• Demonstrate attack vectors through purple teaming.
• Improve security processes and tooling automation.
• Optimize security processes using SLAs and severity frameworks.

Requirements

• Proven experience delivering application security programs.
• Ability to partner with cross-organizational teams.
• Experience with remediation and mitigation strategies.
• Background in product and security engineering.
• Knowledge of hardening practices for AWS, Kubernetes, and CI/CD.
• Experience securing Ruby on Rails, Javascript, and GraphQL applications.
• Familiarity with industry frameworks like SOC2 and HIPAA.

Benefits

• Generous PTO and competitive pay.
• RRSP match program for financial health.
• Flexible benefits package and wellness program.
• Training budget and learning initiatives.
• Discount on Fullscript products.
• Ability to work from anywhere.