Senior Application Security Engineer

About the Role

This is a senior individual contributor role on a small, high-impact security team at a fast-growing B2B SaaS company serving the life sciences and pharma space. You will bring an engineering-first mindset to application security, writing and shipping production-quality fixes yourself rather than handing findings off to others. The role carries real scope to shape how security is embedded across a product organization that moves quickly and builds AI-native features.

What You'll Do

• Contribute production-quality code directly to the application (Node.js and Python), shipping security fixes and hardening features end-to-end.

• Build AI-powered automation to eliminate manual security work, such as pull request analysis and vulnerability triage, so the team can scale through leverage.

• Manage a bug bounty program end-to-end, evaluating and reproducing submissions and closing findings by shipping the fixes yourself.

• Define secure-by-design patterns and drive security standards across the application architecture, including for AI-integrated product features.

• Review RFCs and design documents as a security stakeholder, pairing with engineers to resolve issues at the source.

What We're Looking For

• 6 or more years of hands-on software development and/or application security experience.

• Proficiency in Node.js and Python, with a track record of shipping production-quality security fixes.

• Experience with Terraform and AWS, covering infrastructure as code and cloud security.

• Experience defining secure-by-design patterns and driving security standards for AI-integrated product features.

• Experience building or implementing AI-powered security automation to reduce manual security work.

• End-to-end bug bounty program management experience (such as HackerOne), from submission through remediation.

• Authorization to work in the US or Canada without visa sponsorship.

Compensation & Benefits

The compensation range for this role is $150,000 to $230,000 USD annually. Visa sponsorship is not available.

Location

This role is fully remote, open to candidates based in Canada or the United States.