Staff Security Engineer

About FullscriptWe’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care.That simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.We build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better.This is your invitation.Bring your ideas, your grit, and your care for people.Join us and shape the future of care.Fullscript is seeking a seasoned Staff Security Engineer to join our security team as a senior technical leader. In this role, you’ll shape the technical vision for product and AI security across the organization, mentoring teammates and driving impact through deep technical expertise and cross-functional collaboration.What you'll do:Lead the design and implementation of robust security architectures for Fullscript’s applications, and AI initiatives. Collaborate closely with engineering teams to embed security into the development lifecycle, including threat modeling, security coding practices, and design reviewsDrive AI security best practices, ensuring responsible deployment, and mitigation of risks such as data poisoning, prompt injection, or model exploitationMentor engineers and other security team members, fostering a culture of security awareness and technical excellence across the organizationConduct technical risk assessments, security research, and code reviews to proactively identify and remediate vulnerabilities. Influence cross-functional teams through technical leadership, helping define security standards and strategies that scale across Fullscript’s products and AI ecosystem. Stay ahead of emerging threats, attack vectors, and AI-specific security challenges to guide strategic decisions for the organization’s security postureWhat you bring to the table:Deep technical expertise in application security, and secure software developmentExperience with AI/ML securityStrong understanding of modern software architectures, cloud environments, and APIsProven ability to influence and mentor engineers across teams, fostering security-first thinking and best practicesHands-on experience with security tooling and automation, including static/dynamic analysis, monitoring, and observability systemsStrong problem solving skills, able to balance security rigor with product velocityExcellent communication and collaboration skills, able to translate complex security concepts to technical and non-technical stakeholdersAdditional experience we value:Experience with protecting / hardening of health dataExperience securing Ruby on Rails, Javascript, GraphQL applicationsFamiliarity with regulatory and compliance frameworks relevant to software and AI security is a plus (e.g. SOC 2, NIST)What we can offer you:Generous PTO and competitive payFullscript’s RRSP match program for financial healthFlexible benefits package and workplace wellness programTraining budget and company-wide learning initiativesDiscount on Fullscript catalog of productsAbility to work Wherever You Work Well*Why FullscriptGreat work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.What To Know Before You ApplyWe’re grateful for the interest in joining Fullscript. To make sure your application reaches our hiring team, please apply directly through our careers page.A quick note: Due to the high volume of applications, we’re not able to respond to phone or email inquiries about application status. If there’s a match, our team will reach out directly.Fullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request at accommodations@fullscript.com.All offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws.We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S.Learn Morewww.fullscript.com@fullscriptHQ on instagramLet’s make healthcare wholeWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.