Senior AppSec Engineer: Secure, Scalable Code (Equity)

Faire; Toronto; Hybrid; CAD 160,000 - 220,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

Faire seeks a Senior Security Engineer specializing in Application Security to harden our software supply chain and secure our AI-assisted development workflows. You will own vulnerability management, perform threat modeling, and lead security reviews across product teams in a hybrid work model.

Bring hands-on experience with SAST/DAST/SCA, cloud security in AWS/GCP, and a passion for coding security problems at scale. Equity and comprehensive benefits are offered in a fast-growing marketplace.

Qualifications

• Experience integrating security into the software development lifecycle.
• Experience driving vulnerability remediation across teams you do not own, with severities, SLAs, and closure.
• Exposure to offensive security, such as bug bounty or external pentests.
• Passion for coding and automating security problems over relying on process.
• Comfort reading and reviewing code in Kotlin, Java, Python, or TypeScript.
• Hands-on with AppSec tooling (SAST/DAST/SCA/secret scanning) and tuning rules to reduce false positives.
• Strong understanding of web app security and OWASP Top 10; focus on systemic fixes.
• Experience leading threat models on unfamiliar systems and determining when they are needed.
• Experience in AWS or GCP cloud environments.
• Ability to explain risk to engineers to encourage fixes.
• Curiosity about AI-assisted development security.

Responsibilities

• Find and fix vulnerabilities in first-party code and third-party dependencies.
• Build shift-left tooling and CI/CD guardrails for secure default paths.
• Own offensive security engagements with external vendors.
• Evaluate and harden security of AI-assisted code generation workflows.
• Own the bug bounty program and vulnerability lifecycle from intake to closure.
• Lead threat modeling and secure design reviews for new products and high-risk changes.
• Conduct security reviews with product teams and develop secure coding standards and scaling frameworks.

Skills

Security engineering

SDLC integration

Vulnerability remediation

Offensive security

Automated tooling

Cloud (AWS/GCP)

Code reviews

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

SCA

Secret scanning

Job description

Faire seeks a Senior Security Engineer specializing in Application Security to harden our software supply chain and secure our AI-assisted development workflows. You will own vulnerability management, perform threat modeling, and lead security reviews across product teams in a hybrid work model.

Bring hands-on experience with SAST/DAST/SCA, cloud security in AWS/GCP, and a passion for coding security problems at scale. Equity and comprehensive benefits are offered in a fast-growing marketplace.