Staff Security Engineer Job at Fullscript (Ottawa)

Staff Product Security Engineer

We’re looking for a Staff Product Security Engineer to lead the design and imple...

Location

United States

Salary:

184000.00 - 252000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

7+ years of experience in product, application, or cloud security engineering
Deep understanding of secure SDLC, threat modeling, and secure architecture design
Proven expertise with AWS cloud security concepts and best practices
Strong experience with container security, orchestration, and runtime protection
Proficiency in Python, Java, and/or JavaScript for security automation, code review, and tooling
Experience securing AI/ML pipelines, data workflows, or model-serving infrastructure
Familiarity with DevSecOps and continuous integration/deployment environments

Job Responsibility

Embed robust security practices throughout the software and AI development lifecycle (SDLC)
Lead secure design reviews, threat modeling, and risk assessments for AI-driven products, APIs, and backend services
Partner with engineering and product teams to ensure security, privacy, and compliance by design
Build and maintain security automation and governance frameworks that integrate seamlessly into development workflows
Architect and enforce security controls for AI/ML systems, including model training, data pipelines, and inference environments
Identify and mitigate AI-specific attack vectors such as data poisoning, model inversion, prompt injection, and model theft
Collaborate with governance and compliance teams to align with ethical AI principles and frameworks like NIST AI RMF and the EU AI Act
Implement model provenance, integrity, and auditability controls to ensure responsible and secure AI operations
Partner with DevOps and SRE teams to secure service meshes, container networking, and secrets management
Drive software supply chain security, including artifact integrity, dependency management, and vulnerability reduction

What we offer

Competitive compensation, benefits, and career growth opportunities
Opportunity to shape and drive product security strategy
Collaborative and security-minded engineering culture
Work on cutting-edge security challenges in a fast-growing company
Performance-based bonus, equity, and a generous benefits program

Fulltime

Staff Security Engineer

At hyperexponential, we’re building the AI-powered platform that enables the wor...

Location

United Kingdom , London

Salary:

Not provided

hyperexponential

Expiration Date

Until further notice

Requirements

Built or significantly contributed to security programmes from the ground up, establishing foundational security controls, compliance readiness, and incident response capabilities
Designed and implemented security architecture for cloud-based distributed systems (AWS or equivalent), including multi-account strategies, identity and access management, network security, and data protection
Driven technical security improvements by writing code, building tools, and implementing controls that scaled with company growth
Integrated security into development workflows through DevSecOps practices including automated testing, secrets management, container security, and infrastructure-as-code security
Led or supported compliance initiatives (SOC2, ISO27001, GDPR, or similar), mapping technical controls to compliance requirements and guiding teams through audit cycles
Built trust with engineering teams by contributing technically and making security collaborative and frictionless
Balanced security rigor with business goals, making risk-based trade-offs that enabled growth while protecting customers and the business
Evaluated security implications of AI/ML systems, including understanding AI-specific risks and implementing controls to secure them

Job Responsibility

Build hx's security programme from the ground up, setting direction for security architecture, compliance, and incident response as we scale globally
Design and implement security controls across AWS cloud infrastructure, Kubernetes workloads, and our multi-product platform, ensuring systems are secure by design
Integrate security into engineering workflows by embedding automated security testing, vulnerability management, and threat detection into CI/CD pipelines without slowing teams down
Lead or contribute to compliance initiatives (SOC2, ISO27001) by implementing technical controls and working cross-functionally with legal, engineering, and business teams to enable enterprise sales
Build security automation and tooling by writing code and scripts that scale security practices, detect vulnerabilities, and enforce policies efficiently
Partner with Engineering Managers, Principal Engineers, and Product Managers to embed security thinking early in design and architecture decisions
Act as a trusted voice in critical moments: responding to incidents, unblocking teams on security questions, and keeping high-stakes initiatives secure and on track
Assess and secure AI-powered systems across hx's platform, implementing controls that enable safe adoption of AI while mitigating risks like prompt injection, data leakage, and model vulnerabilities

What we offer

£5,000 training and conference budget for individual and group development
25 days of holiday plus 8 bank holidays (33 days total)
Company pension scheme via Penfold
Mental health support and therapy via Spectrum.life
Individual wellbeing allowance via Juno
Private healthcare insurance through AXA
Income protection and Life Insurance
Cycle to Work Scheme
Top-spec equipment (laptop, screens, adjustable desks, etc.)
Regular remote and in-person hackathons, lunch and learns, socials, and game nights

Fulltime

Staff Application Security Engineer

As a Staff Application Security Engineer at Culture Amp, you will play a pivotal...

Location

Australia , Sydney

Salary:

Not provided

Culture Amp

Expiration Date

Until further notice

Requirements

Extensive experience in application security engineering, with a proven track record of leading security initiatives in SaaS or cloud-native environments
Deep technical expertise in secure software development, secure coding practices, and common security frameworks (e.g., OWASP Top 10, NIST, PCI, SOC 2)
Proficiency in multiple programming languages (e.g., Ruby, Python, JavaScript, Go) and experience with modern web application architectures and cloud platforms (e.g. AWS)
Strong knowledge of security automation, CI/CD integration, and DevSecOps practices
Experience designing and implementing security tools, frameworks, and processes that scale with developer velocity
Demonstrated ability to lead and influence cross-functional teams, drive change, and deliver results in ambiguous or complex environments
Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences
Experience mentoring and developing engineers, and a passion for building a culture of security and continuous improvement
Familiarity with security-related compliance requirements and standards relevant to SaaS businesses

Job Responsibility

Lead and drive the most complex and high-impact application security reviews, threat modeling, and risk assessments across our product portfolio, providing expert guidance and direction for other team members
Collaborate with engineering, product, and platform teams to embed security into the SDLC, including secure design, code review, and automated security testing (DevSecOps)
Develop and scale security automation, tools, and centralized libraries that enable developers to build secure applications efficiently and at scale
Proactively identify, assess, and address security risks and vulnerabilities in our SaaS environment, including cloud-native and microservices architectures
Own and evolve our vulnerability management programs, ensuring timely triage, remediation, and communication of security issues
Mentor and support engineers across the organization, fostering a culture of security awareness, knowledge sharing, and continuous learning
Influence and drive cross-functional security initiatives, partnering with compliance, privacy, and infrastructure teams to meet regulatory and customer requirements (e.g., SOC 2, ISO 27001, OWASP)
Stay current with the latest security threats, technologies, and best practices, and advocate for their adoption within Culture Amp
Represent Culture Amp’s security expertise internally and externally, including supporting customer security reviews and contributing to the broader security community

What we offer

Employee Share Options Program
Programs, coaching, and budgets to help you thrive personally and professionally
Access to external providers for mental wellbeing and coaching support
Monthly Camper Life Allowance
Team budgets dedicated to team building activities and connection
Intentional quarterly wellbeing pauses
Extended year-end breaks
Excellent parental leave and in work support program available from day 1
5 Social Impact Days a year
MacBooks for you to do your best & a work from home office budget

Fulltime

Staff Security Engineer

At hyperexponential, we’re building the AI-powered platform that enables the wor...

Location

Poland , Warsaw

Salary:

Not provided

hyperexponential

Expiration Date

Until further notice

Requirements

Built or significantly contributed to security programmes from the ground up
Designed and implemented security architecture for cloud-based distributed systems (AWS or equivalent)
Driven technical security improvements by writing code, building tools, and implementing controls
Integrated security into development workflows through DevSecOps practices
Led or supported compliance initiatives (SOC2, ISO27001, GDPR, or similar)
Evaluated security implications of AI/ML systems

Job Responsibility

Build hx's security programme from the ground up
Design and implement security controls across AWS cloud infrastructure, Kubernetes workloads, and our multi-product platform
Integrate security into engineering workflows by embedding automated security testing, vulnerability management, and threat detection into CI/CD pipelines
Lead or contribute to compliance initiatives (SOC2, ISO27001)
Build security automation and tooling by writing code and scripts
Partner with Engineering Managers, Principal Engineers, and Product Managers to embed security thinking early in design and architecture decisions

What we offer

Share Options
25 days of non-working + 14 Polish bank holidays (B2B) / 26 days of holiday + 14 Polish bank holidays (UoP)
£5,000 budget for Learning & Development
Mental Health Support and Therapy via Spectrum Life
Optional access to Healthcare package provided by Luxmed + Multisport (B2B)
Top-spec laptop (MacOS or Windows)
Company pension (UoP)
10 days company sick pay at 100% salary (UoP)
Monthly wellbeing allowance via Juno (UoP)
Healthcare package provided by Luxmed (UoP)

Fulltime

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations.

Job Responsibility

Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure
Participate in the design and implementation of security architectures, from the design to the risk assessment
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement.

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products.

Fulltime

Staff Application Security Engineer

As a Staff Application Security Engineer at Culture Amp, you will play a pivotal...

Location

Australia , Melbourne; Sydney

Salary:

Not provided

Culture Amp

Expiration Date

Until further notice

Requirements

Extensive experience in application security engineering, with a proven track record of leading security initiatives in SaaS or cloud-native environments
Deep technical expertise in secure software development, secure coding practices, and common security frameworks (e.g., OWASP Top 10, NIST, PCI, SOC 2)
Proficiency in multiple programming languages (e.g., Ruby, Python, JavaScript, Go) and experience with modern web application architectures and cloud platforms (e.g. AWS)
Strong knowledge of security automation, CI/CD integration, and DevSecOps practices
Experience designing and implementing security tools, frameworks, and processes that scale with developer velocity
Demonstrated ability to lead and influence cross-functional teams, drive change, and deliver results in ambiguous or complex environments
Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences
Experience mentoring and developing engineers, and a passion for building a culture of security and continuous improvement
Familiarity with security-related compliance requirements and standards relevant to SaaS businesses

Job Responsibility

Lead and drive the most complex and high-impact application security reviews, threat modeling, and risk assessments across our product portfolio, providing expert guidance and direction for other team members
Collaborate with engineering, product, and platform teams to embed security into the SDLC, including secure design, code review, and automated security testing (DevSecOps)
Develop and scale security automation, tools, and centralized libraries that enable developers to build secure applications efficiently and at scale
Proactively identify, assess, and address security risks and vulnerabilities in our SaaS environment, including cloud-native and microservices architectures
Own and evolve our vulnerability management programs, ensuring timely triage, remediation, and communication of security issues
Mentor and support engineers across the organization, fostering a culture of security awareness, knowledge sharing, and continuous learning
Influence and drive cross-functional security initiatives, partnering with compliance, privacy, and infrastructure teams to meet regulatory and customer requirements (e.g., SOC 2, ISO 27001, OWASP)
Stay current with the latest security threats, technologies, and best practices, and advocate for their adoption within Culture Amp
Represent Culture Amp’s security expertise internally and externally, including supporting customer security reviews and contributing to the broader security community

What we offer

Employee Share Options Program
Programs, coaching, and budgets to help you thrive personally and professionally
Access to external providers for mental wellbeing and coaching support
Monthly Camper Life Allowance
Team budgets dedicated to team building activities and connection
Intentional quarterly wellbeing pauses
Extended year-end breaks
Excellent parental leave and in work support program available from day 1
5 Social Impact Days a year
MacBooks for you to do your best & a work from home office budget

Staff Product Security Engineer

As a Staff Product Security Engineer, you will play a crucial role in safeguardi...

Location

France , Paris

Salary:

Not provided

Dashlane

Expiration Date

Until further notice

Requirements

Strong understanding of application security best practices, including experience with threat modeling and risk assessments
Demonstrated experience building or improving an SDLC program
Familiarity with CI/CD pipelines and their security implications
Familiarity with cloud infrastructure (e.g., AWS, Azure, Kubernetes), and Infrastructure-as-Code (e.g., Terraform)
Interest in enabling secure use of AI tools to drive efficiency, creativity, and impact internally
Communication & Collaboration: You engage and listen empathetically to others, adjusting your communication style to fit the audience and message. You are experienced in communicating with technical and non-technical audiences
Mentoring: You enjoy using your knowledge and experience to support and uplevel those around you
Motivated Learner: You learn new technologies and processes quickly, and understand where to look for knowledge when you need it
Adaptability: You are a jack or jane of all trades - you’re comfortable digging into non-technical parts of the business to provide security support and guidance

Job Responsibility

Drive the continuous improvement of Dashlane’s security program across the product and company
Conduct architecture design reviews, threat modeling, and technical security assessments of Dashlane’s product (application and infrastructure) to identify security risks and provide mitigation guidance
Ensure security best practices are integrated throughout the software development lifecycle (SDLC)
Build upon and scale Vulnerability Management to ensure the team can track, analyze, and manage vulnerabilities and their remediation
Perform risk assessments of Dashlane’s internal systems, environments, assets, and data, and implement security best practices accordingly
Evaluate and implement security tooling and/or build customized tooling in-house where necessary
Participate in Compliance and Incident Response
Innovate and propose new forward-looking security features that protect Dashlane and our users

What we offer

Equal Parental leave - regardless of gender, up to 20 weeks fully paid leave to take care of their new baby, within the first year of birth or adoption
Health insurance covered by Dashlane
Mentorship program - select your mentor from our internal pool and continue your learning path!
Commute allowance
Meal Vouchers (Swile)
Mental health services through Spring Health for you and family members
4 extra days off (one per quarter) to acknowledge the importance of your wellbeing
Spot in daycare
Time off saving account
Donation matching program - give back to the community and support actions that lead to positive social impact under the historically marginalized communities. Every donation will be matched by Dashlane

Fulltime

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations

Job Responsibility

Building and driving the cybersecurity transformation by integrating secure development practices, ensuring application security via automated scanning, and collaborating closely with the Infrastructure, Engineering, and The product security (Donjon) teams
Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure
Participate in the design and implementation of security architectures, from the design to the risk assessment
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products

Fulltime

Staff Security Engineer

Fullscript

Location:
Canada; United States , Ottawa ▼
Austin
Toronto
Calgary

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
January 06, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Staff Security Engineer

Staff Product Security Engineer

Staff Security Engineer

Staff Application Security Engineer

Staff Security Engineer

Staff Cloud Security Engineer

Staff Application Security Engineer

Staff Product Security Engineer

Staff Cloud Security Engineer

Staff Security Engineer

Fullscript

Location:Canada; United States , Ottawa ▼AustinTorontoCalgary

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:January 06, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Staff Security Engineer

Staff Product Security Engineer

Staff Security Engineer

Staff Application Security Engineer

Staff Security Engineer

Staff Cloud Security Engineer

Staff Application Security Engineer

Staff Product Security Engineer

Staff Cloud Security Engineer

Location:
Canada; United States , Ottawa ▼
Austin
Toronto
Calgary

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
January 06, 2026