Lead Security Engineer

1 week ago Be among the first 25 applicants Founded in ****, Fullscript started by solving one problem: helping practitioners access and prescribe the products they trust to deliver integrative care. What began as a simple solution has evolved into a health intelligence platform that powers every part of care. Today, 125,000 practitioners rely on Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. They support over 10 million patients who use Fullscript to stay connected to their care plans, making it easier to stay engaged and follow through on treatment. We build tools that make care smarter and more human, saving time, simplifying decisions, and strengthening the connection between practitioner and patient. When everything practitioners need is in one place, they can focus on what matters most: helping people get better. Bring your ideas. Bring your grit. Bring your care for people. Join us and shape the future of care. Seniority level Mid‑Senior level Employment type Full‑time Job function Information Technology Industry Dairy Product Manufacturing The Role As the Lead Security Engineer, you will be leading and maturing our efforts in delivering a modern and secure user experience and effective risk management. You will join a Security team responsible for DevSecOps, AppSec, GRC, security operations, and incident response, and will have the opportunity to make a difference on a wide array of security challenges and solve interesting problems along the way. What You’ll Do Drive security initiatives ensuring security is considered from design through implementation. Effectively utilize threat models to inform application design decisions. Perform security code reviews to validate vulnerabilities, exploitabilities, and adherence to security best practices. Triage application vulnerabilities and recommend remediation strategies. Purple team our application and demonstrate attack vectors. Improve security processes and tooling automation. Optimize security processes using SLAs, severity frameworks, and remediation protocols. What You Bring to the Table Demonstrated success delivering application security programs. Experience partnering with cross‑organizational teams to drive security initiatives. Experience with engineering‑focused remediation and mitigation strategies against security vulnerabilities. Experience with product engineering and security engineering. Additional Experience We Value Hardening/ security best practices for AWS, Kubernetes, CI/CD pipelines, IaC, Terraform, CloudFormation. Protecting and hardening of health data. Securing Ruby on Rails, JavaScript, GraphQL applications. Pen‑test software (BurpSuite). Understanding of industry frameworks (SOC 2, PCI, HIPAA, HITRUST, NIST). What We Can Offer You Generous PTO and competitive pay. Fullscript's RRSP match program for financial health. Flexible benefits package and workplace wellness program. Training budget and company‑wide learning initiatives. Discount on Fullscript catalog of products. Ability to work wherever you work well. You’ll Join a Team That Values innovation. Supports growth. Puts people first. Apply Now Please apply directly through our careers page to ensure your application reaches our hiring team. Equal Opportunity Statement Fullscript is an equal‑opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request. All employment offers are contingent upon the successful completion of background checks, conducted in compliance with applicable federal, state, and provincial laws. #J-18808-Ljbffr