{"id":457576,"url":"https://alion.io/job/biorender-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":175954,"name":"BioRender","domain":"biorender.com","url":"https://alion.io/company/biorender","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Gem","truth_index":{"grade":"B","score":82,"open_postings":18,"ghost_share":0.222,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":79,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":70000,"max_usd":141000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"React.js","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true},{"name":"LLM","optional":true},{"name":"PKI","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-07-15T17:09:36Z","employer_posted_date":"2026-07-21","last_verified_at":"2026-10-31T05:51:04Z","board_verified":true,"closed_at":null,"days_open":107,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":107},"description":"At BioRender, we’re on a mission to accelerate the world’s ability to learn, discover, and communicate science - transforming how knowledge is shared and making science open, collaborative, and easily understandable by all.\nWe’re shaping the future of science communication and are looking for talented individuals to help bring this vision to life!\nBioRender is seeking a Senior Application Security Engineer to join our Security team - an engineer first, who contributes directly to the codebase rather than managing security from the sidelines. You'll help define how security is built into our engineering organization, contributing production code across our application (Node.js/React/Python) and infrastructure (Python, Terraform, AWS, Cloudflare) while shaping secure-by-design patterns, CI/CD automation, and engineering workflows that let the company move quickly and safely.\nYou'll work AI-natively, using AI coding assistants and agentic tooling to accelerate your own work while helping secure the AI-powered capabilities we're building. If you're excited by building developer-friendly security systems, solving meaningful engineering problems, and focusing on the threats that actually matter, we'd love to hear from you.\nWhat you'll do\nHands-on engineering & codebase contribution\nContribute production-quality code directly to the application (Node.js/React) and infrastructure (Python, Terraform) - you ship fixes and hardening yourself, not just findings for others to action.\nBuild and maintain security and CI/CD tooling for automation, keeping the secure path the default path.\nAct as a security reviewer on RFCs and design documents, and pair with engineers to resolve issues at the source.\nArchitecture, design & secure SSDLC\nDefine secure-by-design patterns and drive standards for authentication, authorization, and API security.\nLead threat modeling on new and existing systems and turn those models into shipped controls.\nOwn and evolve the Secure SDLC and CI/CD security integration (SAST/DAST/SCA/secrets) - tuned for high signal and low noise.\nAI-native security & automation\nWork AI-natively: use AI coding assistants and agentic tooling to accelerate code review, triage, and tooling development.\nSecure AI-integrated product features - reasoning about prompt injection, data leakage, and over-scoped tool, token, and data access.\nAutomate recurring security work so the team scales through leverage, not headcount.\nWeb & product security (active defense)\nPerform penetration testing and code reviews (Node.js/React) using OWASP methodology.\nDrive identification and remediation of application security vulnerabilities (SAST/DAST/HackerOne).\nOwn the bug bounty program end to end - issue evaluation, reproduction, and closing findings by shipping fixes.\nWhat you bring\nDemonstrable software engineering ability - you read code fluently, write production-quality code that engineers respect, and have contributed to real codebases (Node.js/React; Python a plus).\nFluency using AI development tools (AI coding assistants, agentic workflows) to get the job done, and a clear-eyed view of the security risks they introduce.\nExpertise in web application security and secure-coding best practices, and the ability to review code and application findings.\nExperience integrating and maintaining SAST/DAST systems within CI/CD, and with Secure Software Development Life Cycles.\nHands-on experience securing cloud workloads on AWS and comfort with infrastructure-as-code (Terraform or equivalent); familiarity with Cloudflare a plus.\nThreat-modeling experience and command of common code and network vulnerability types, their impact, and remediation.\nApplied knowledge of cryptography, PKI, and TLS and their practical implementation.\nNice to have:\nExperience hardening LLM-integrated or AI-powered features in production.\nExperience operating a bug bounty program (e.g. HackerOne).\nContributions to SOC 2 control design and audit readiness from the engineering side.\nRelevant certifications (e.g. OSCP, OSWE, AWS Security Specialty) - valued, but not a substitute for engineering ability.\nWhy join us?\nWe are mission-driven: we work collaboratively towards our shared vision of improving scientific communication and accelerating scientific discovery. BioRender figures have appeared in more than 54,000 publications! \nBioRender is loved by millions! We have a world-class NPS and a community of loyal fans and users in 200+ countries!\nOur company is backed by top investors and accelerators like Y Combinator, and we are on a growth trajectory comparable to many top-performing SaaS companies \n We’re remote-first with team members across Canada and the U.S., offering you the flexibility to work from anywhere. \nBioRender is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.","description_format":"text","description_chars":5078,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Science & Engineering","Scientific & Lab Software"],"lifecycle":[{"event":"open","at":"2026-09-06T10:07:57Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.358,"p_room":0.44,"age_days":107,"expected_fill_days":79,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/biorender-senior-application-security-engineer","json_url":"https://alion.io/job/biorender-senior-application-security-engineer.json","meta":{"generated_at":"2026-10-31T08:48:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13224,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175954},"rest":"https://alion.io/mcp/rest/get_company?id=175954"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbiorender-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbiorender-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbiorender-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/biorender-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbiorender-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":457576}},{"tool":"search_jobs","arguments":{"company":"biorender.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":457576},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}