Fullscript

Fullscript

Fullscript provides a platform that enables healthcare practitioners to create personalized supplement plans and recommend professional-grade supplements to their patients, enhancing patient care and treatment adherence through convenient ordering and ...

Health Care Providers & Services
251-1K
Founded 2011
$267M raised

Description

  • Lead the design and implementation of security solutions across Fullscript’s applications, platforms, and AI-powered systems.
  • Partner with engineering teams to embed security throughout the software development lifecycle, including architecture reviews, threat modeling, secure coding practices, and design reviews.
  • Drive application security, product security, and vulnerability management initiatives from concept through implementation.
  • Own complex security challenges that span multiple teams while balancing technical requirements, business priorities, and engineering constraints.
  • Mentor engineers and security practitioners to improve secure software development practices and decision-making.
  • Influence technical strategy and security standards through hands-on engineering and cross-functional collaboration.
  • Stay current on emerging threats, security technologies, and AI-specific risks to strengthen Fullscript’s security posture.

Requirements

  • 8+ years of software engineering experience designing, building, and operating production systems.
  • 3+ years of recent experience in application security, product security, security engineering, or a related security discipline.
  • Deep understanding of secure software development, modern application architectures, APIs, and cloud-native environments.
  • Experience owning complex technical initiatives from problem definition through delivery across multiple teams and stakeholders.
  • Proven ability to influence technical direction, mentor engineers, and drive adoption of security best practices.
  • Strong hands-on experience with security tooling, automation, vulnerability management, and security assessments.
  • Excellent communication skills, strong technical judgment, and a continuous learning mindset.
  • Experience securing Ruby on Rails, Node.js, JavaScript, GraphQL, or similar ecosystems is a plus.
  • Experience with AWS cloud security and cloud-native security controls is a plus.
  • Familiarity with threat modeling frameworks such as STRIDE or PASTA, developer security tooling, GitHub, GitLab, Wiz, static analysis tools, or secret scanning is a plus.

Benefits

  • Remote-first flexibility, with North America (Ottawa, Toronto, or Calgary) preferred for this role.
  • Flexible PTO and competitive pay.
  • RRSP/401k match and stock options.
  • Premium benefits package with customizable coverage, paramedical services, and an HSA.
  • Fullscript discounts on wellness products.
  • Continuous learning opportunities to grow skills and career.
  • Salary transparency with base pay reviewed regularly for market alignment and internal equity.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Saviynt IAM Specialist

The Missing Link 51-250 Internet Software & Services

The Missing Link is seeking a Security Engineer - Saviynt to support large enterprise identity governance initiatives, design and deliver Saviynt-based solutions, and strengthen its growing cyber security practice.

Active Directory Azure Cybersecurity JavaScript PowerShell REST API SAP SQL
2 hours, 39 minutes ago

AI Security Architect (REMOTE - United States)

EnableComp 251-1K Insurance

EnableComp is seeking a remote AI Security Architect to secure and govern its AI and machine learning initiatives within its healthcare revenue cycle management environment.

Azure Cybersecurity HIPAA LLM Machine Learning
2 hours, 54 minutes ago

Senior Infrastructure Security Engineer

Dropbox 1K-5K Internet Software & Services

Dropbox is hiring a Security Engineer to secure its AI and agentic infrastructure while helping protect products and users across cloud and on-prem environments.

Bash CI/CD CrowdStrike Go Java Kubernetes Linux LLM Node.js OAuth OpenID Connect OWASP Python Ruby Rust SIEM
2 hours, 54 minutes ago

Senior Infrastructure Security Engineer

Dropbox 1K-5K Internet Software & Services

Dropbox is hiring a Security Engineer to protect its AI and cloud infrastructure by integrating security into products and operations for millions of users.

Bash CI/CD CrowdStrike Go IDS IPS Java Kubernetes Linux LLM Node.js OAuth OpenID Connect OWASP Python Ruby Rust SIEM
3 hours, 24 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers