About Fullscript

We’re a leading health technology company with a mission to help people get better. We began in 2011 with one simple idea: make it easier for practitioners to access the products they trust so they can provide better care.

That idea grew into a platform that supports every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.

We build tools that make care smarter and more human—tools that save time, simplify decisions, and help practitioners stay closely connected to the people they serve. When everything they need is in one place, they can focus on what matters most: helping people get better.

This is your invitation.

Bring your ideas, your grit, and your commitment to people.
Join us and help shape the future of care.

The Opportunity

Fullscript is looking for a Staff Security Engineer to join our Security Engineering team as a senior technical leader and hands-on builder. This role is best suited to someone who started their career in software engineering and has developed deep expertise in security engineering, application security, or product security.

You’ll work closely with engineering teams to design and implement security solutions that scale across Fullscript’s products and platforms. As a Staff-level engineer, you’ll lead complex technical initiatives, help define security strategy, and influence how security is integrated into the software development lifecycle. You’ll be expected to balance hands-on engineering with technical leadership—mentoring engineers and helping teams address security challenges in ways that support business goals and engineering speed.

We’re looking for someone who can own systems end-to-end—from application development and infrastructure decisions to security design and implementation. You should understand how to build secure, scalable solutions that perform in production. The ideal candidate is deeply technical, highly collaborative, and motivated by solving difficult problems across multiple teams, systems, and domains.

What you’ll do

– Lead the design and implementation of security solutions across Fullscript’s applications, platforms, and AI-powered systems.
– Partner with engineering teams to embed security throughout the software development lifecycle, including architecture reviews, threat modeling, secure coding practices, and design reviews.
– Drive application security, product security, and vulnerability management initiatives from concept through delivery.
– Own complex security problems that involve multiple teams, balancing technical needs, business priorities, and engineering constraints to deliver scalable solutions.
– Mentor engineers and security practitioners, improving the standard for secure software development and supporting sound security decision-making.
– Help shape technical strategy and security standards through hands-on engineering, leadership, and cross-functional collaboration.
– Stay ahead of emerging threats, security technologies, and AI-specific risks to strengthen Fullscript’s long-term security posture.

What you bring to the table

– 8+ years of software engineering experience designing, building, and operating production systems.
– 3+ years of recent experience in application security, product security, security engineering, or a related security field.
– Strong understanding of secure software development, modern application architectures, APIs, and cloud-native environments.
– Experience owning complex technical initiatives from problem definition to delivery, including working with multiple teams and stakeholders.
– Proven ability to influence technical direction, mentor engineers, and drive adoption of security best practices.
– Hands-on experience with security tooling, automation, vulnerability management, and security assessments.
– Excellent communication skills, strong technical judgment, and a continuous learning mindset.

Bonus if you have

– Experience securing Ruby on Rails, Nodejs, JavaScript, GraphQL, or similar ecosystems.
– Experience with AWS cloud security and cloud-native security controls.
– Experience with threat modeling methods such as STRIDE, PASTA, or similar frameworks.
– Experience with vulnerability management, application security posture management, or developer-focused security tooling.
– Familiarity with GitHub, GitLab, Wiz, static analysis tools, secret scanning, or similar security platforms.
– Experience with penetration testing, security research, or ethical hacking.
– Experience protecting healthcare, regulated, or sensitive customer data.

What we can offer you

– Remote-first flexibility; North America locations (Ottawa, Toronto, or Calgary) are preferred for this role.
– Flexible paid time off and competitive pay—because work-life balance matters.
– RRSP/401k matching and stock options to invest in your future.
– A premium benefits package with customizable coverage, paramedical services, and an HSA.
– Fullscript discounts on high-quality wellness products.
– Ongoing learning opportunities to grow your skills and career.

Fullscript provides salary range information to support transparency. The range listed reflects base salary only and does not include stock options, wellness stipends, or other benefits included in Fullscript’s total rewards package. Final compensation depends on experience, skills, and location. We review pay regularly to stay aligned with market data and internal equity. Benefits and total rewards may vary by region.

Why Fullscript

Great work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding better ways to improve care. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.

What to Know Before You Apply

Thank you for your interest in joining Fullscript. To ensure your application reaches our hiring team, please apply through our careers page.

A quick note: Due to the high volume of applications, we can’t respond by phone or email about application status. If there’s a fit, our team will contact you directly.

Fullscript is an equal opportunity employer committed to building an inclusive workplace. Accommodations are available upon request at accommodations@fullscript.com

All offers are conditional on successful background checks carried out in accordance with federal, state, and provincial laws.

We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and comply with all applicable privacy and employment laws in Canada and the U.S.

Learn More

https://fullscript.com
@fullscriptHQ on Instagram
@fullscript on YouTube
FullScript on LinkedIn