{"id":109553,"url":"https://alion.io/job/fullscript-staff-security-engineer","title":"Staff, Security Engineer","company":{"id":9061,"name":"Fullscript","domain":"fullscript.com","url":"https://alion.io/company/fullscript","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ottawa, Canada","Vancouver, Canada","Toronto, Canada","Calgary, Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":88000,"max_usd":162000,"period":"year","method":"role_seniority_country_cell","sample_n":12},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"GitHub","optional":true},{"name":"GitLab","optional":true},{"name":"GraphQL","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"Ruby","optional":true},{"name":"Ruby on Rails","optional":true},{"name":"STRIDE","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-06-05T14:54:57Z","employer_posted_date":"2026-06-05","last_verified_at":"2026-10-16T14:35:12Z","board_verified":true,"closed_at":null,"days_open":133,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":132},"description":"About Fullscript\nWe’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care.\nThat simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.\nWe build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better.\nThis is your invitation.\nBring your ideas, your grit, and your care for people.\nJoin us and shape the future of care.\nThe Opportunity\nWe're looking for a Staff Security Engineer to join Fullscript's Security Engineering team as a senior technical leader and hands-on builder. This role is ideal for someone who started their career in software engineering and developed deep expertise in security engineering, application security, or product security.\nYou'll work closely with engineering teams to design and implement security solutions that scale across Fullscript's products and platforms. As a Staff-level engineer, you'll own complex technical initiatives, help shape security strategy, and influence how security is built into the software development lifecycle. You'll be expected to balance hands-on execution with technical leadership, mentoring engineers and helping teams solve security challenges in a way that supports both business objectives and engineering velocity.\nWe're looking for someone who has owned systems end-to-end; from application development and infrastructure decisions through security design and implementation; Understands how to build secure, scalable solutions in production environments. The ideal candidate is deeply technical, highly collaborative, and energized by solving difficult problems that span multiple teams, systems, and domains.\nWhat you'll do\nLead the design and implementation of security solutions across Fullscript's applications, platforms, and AI-powered systems.\nPartner with engineering teams to embed security throughout the software development lifecycle, including architecture reviews, threat modeling, secure coding practices, and design reviews.\nDrive application security, product security, and vulnerability management initiatives from concept through implementation.\nOwn complex security challenges that span multiple teams, balancing technical requirements, business priorities, and engineering constraints to deliver scalable solutions.\nMentor engineers and security practitioners, raising the bar for secure software development and helping teams make sound security decisions.\nInfluence technical strategy and security standards through hands-on engineering, technical leadership, and cross-functional collaboration.\nStay ahead of emerging threats, security technologies, and AI-specific risks to help shape Fullscript's long-term security posture.\nWhat you bring to the table\n8+ years of software engineering experience designing, building, and operating production systems.\n3+ years of recent experience in application security, product security, security engineering, or a related security discipline.\nDeep understanding of secure software development, modern application architectures, APIs, and cloud-native environments.\nExperience owning complex technical initiatives from problem definition through delivery, including working across multiple teams and stakeholders.\nProven ability to influence technical direction, mentor engineers, and drive adoption of security best practices.\nStrong hands-on experience with security tooling, automation, vulnerability management, and security assessments.\nExcellent communication skills, strong technical judgment, and a continuous learning mindset.\nBonus if you have\nExperience securing Ruby on Rails, Node.js, JavaScript, GraphQL, or similar application ecosystems.\nExperience with AWS cloud security and cloud-native security controls.\nExperience with threat modeling methodologies such as STRIDE, PASTA, or similar frameworks.\nExperience with vulnerability management, application security posture management, or developer security tooling.\nFamiliarity with GitHub, GitLab, Wiz, static analysis tools, secret scanning, or related security platforms.\nExperience conducting penetration testing, security research, or ethical hacking activities.\nExperience protecting healthcare, regulated, or sensitive customer data.\nWhat we can offer you\nRemote-first flexibility to work where you work best, with North America (Ottawa, Toronto, or Calgary) preferred for this role.\nFlexible PTO and competitive pay, because work-life balance matters\nRRSP/401k match and competitive compensation packages to invest in your future\nPremium benefits package with customizable coverage, paramedical services, and an HSA.\nFullscript discounts to save on high-quality wellness products\nContinuous learning opportunities to grow your skills and career\nWhy Fullscript\nGreat work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.\nWhat to Know Before You Apply\nWe’re grateful for the interest in joining Fullscript. To make sure your application reaches our hiring team, please apply directly through our careers page.\nA quick note: Due to the high volume of applications, we’re not able to respond to phone or email inquiries about application status. If there’s a match, our team will reach out directly.\nFullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request at .\nAll offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws.\nWe use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S.\nLearn More\nwww.fullscript.com\n@fullscriptHQ on instagram\n@fullscript on YouTube\nFullScript on LinkedIn","description_format":"text","description_chars":6623,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Continuous learning"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["E-commerce Platforms","Dietary Supplements"],"lifecycle":[{"event":"open","at":"2026-06-05T14:54:57Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 2","filings_12m":2,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage; Global Talent Stream","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.479,"p_room":0.28,"age_days":132,"expected_fill_days":45,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/fullscript-staff-security-engineer","json_url":"https://alion.io/job/fullscript-staff-security-engineer.json","meta":{"generated_at":"2026-10-16T15:09:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14907,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9061},"rest":"https://alion.io/mcp/rest/get_company?id=9061"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffullscript-staff-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffullscript-staff-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffullscript-staff-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fullscript-staff-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffullscript-staff-security-engineer"}]}