Senior Application Security Engineer — Hybrid, Equity

Faire; Toronto; Hybrid; CAD 160,000 - 220,000; Full time

Benefits offered by this job

Equity and benefits

Job summary

Faire is seeking a Senior Security Engineer, Application Security, to join our engineering team. You will work on security throughout the SDLC, address vulnerabilities in both first- and third-party code, and drive robust offensive security programs with external vendors.

You will build and tune security tooling, contribute to secure coding standards, and help harden AI-assisted development workflows in a cloud-first environment. Hybrid work model with equity and benefits included.

Qualifications

• Hands-on experience integrating security into the software development lifecycle.
• Experience driving vulnerability remediation across teams you do not own.
• Experience with offensive security initiatives (bug bounty or pen tests).

Responsibilities

• Find and fix vulnerabilities in first-party code and third-party dependencies using AI-powered detection, SAST, DAST, SCA, and secret scanning tooling.
• Build shift-left tooling and CI/CD guardrails that make the secure path the default in the build pipeline.
• Own offensive security engagements such as penetration tests with external vendors.
• Evaluate and harden the security of AI-assisted code generation workflows.
• Own the bug bounty program and the vulnerability management lifecycle end to end.
• Lead threat modeling and secure design reviews for new products and high-risk platform changes.

Skills

SDLC Security

Vulnerability remediation

Offensive security

Coding & automation

Kotlin

Java

Python

TypeScript

AppSec tooling

Cloud security (AWS/GCP)

Risk communication

AI security curiosity

Tools

SAST/DAST/SCA/secret scanning

Job description

Faire is seeking a Senior Security Engineer, Application Security, to join our engineering team. You will work on security throughout the SDLC, address vulnerabilities in both first- and third-party code, and drive robust offensive security programs with external vendors.

You will build and tune security tooling, contribute to secure coding standards, and help harden AI-assisted development workflows in a cloud-first environment. Hybrid work model with equity and benefits included.