Senior Application Security Engineer

About the Role

This is a hands-on application security role on a small, high-impact security team at a growing B2B SaaS company serving the life sciences and research community. You will bring an engineering-first mindset, shipping production security fixes yourself and helping automate manual security work so the team can focus on broader architecture challenges. The work directly supports a fast-moving, AI-integrated product used by millions of scientists worldwide.

What You'll Do

• Contribute production-quality security fixes and hardening features directly to the application in Node.js and Python, rather than delegating findings to other engineers.

• Build AI-powered automation (such as PR analysis and vulnerability triage) to reduce manual security toil and scale the team's impact.

• Manage a bug bounty program end-to-end, including evaluating submissions, reproducing issues, and closing findings by shipping the fixes.

• Define secure-by-design patterns and drive security standards across the application architecture, including for AI-integrated product features.

• Review RFCs and design documents as a security partner, pairing directly with engineers to resolve issues at the source.

What We're Looking For

• 6 or more years of hands-on software development and/or application security experience.

• Strong proficiency in Node.js and Python, with a track record of shipping production-quality security fixes.

• Experience owning application-level security at a VC-backed startup with fewer than 1,000 employees.

• Prior experience as a software engineer, ideally at a large-scale tech company, followed by security-focused work at a smaller startup.

• Experience with Terraform and AWS for infrastructure as code and cloud security.

• Demonstrated experience building or implementing AI-powered security automation to reduce manual work.

• End-to-end bug bounty program management experience (platforms such as HackerOne).

• Strong CS fundamentals; a degree in computer science or a related field is a plus.

• Authorization to work in the US or Canada without visa sponsorship (no sponsorship is available).

Compensation & Benefits

Salary range: $150,000 to $230,000 USD annually. No visa sponsorship is available.

Location

Fully remote. Open to candidates based in Canada or the United States.