Staff Security Engineer

Jane; Canada; Remote; CAD 150,000 - 210,000; Full time

Job summary

Jane is seeking a staff-level security engineer to lead product security initiatives, from architecture to lifecycle changes, including private package repositories and SCA tooling, with AI-enhanced security. You will mentor teammates, build strong relationships with developers, and drive cross-functional security improvements across a remote-first team spanning Canada, the US, and the UK.

If you enjoy turning vulnerabilities into architectural fixes and guiding teams through change, this role

Qualifications

• Staff-level application security experience, owning security initiatives end to end with development teams.
• Real development background; Ruby on Rails preferred, others (Python, Java, C#) with Rails exposure.
• Experience identifying systemic vulnerability patterns and driving architectural fixes with engineering teams.
• Strong relationship skills; able to explain risk clearly to developers and stakeholders.
• Hands-on AI in security; automating security tasks and securing AI features in products.

Responsibilities

• Turn recurring AppSec findings into architectural fixes by identifying common themes across vulnerabilities.
• Lead product security projects end to end, including private package repositories and SCA tooling maturation.
• Integrate AI into vulnerability analysis and draft fixes closer to the codebase.
• Champion secure development across Jane by building trusted developer relationships and reducing friction.
• Represent Product Security in cross-functional groups and mentor teammates as the most senior hands-on engineer.

Skills

Staff-level AppSec

Rails experience

AI in security

Vulnerability pattern analysis

Cross-functional collaboration

Tools

GitHub workflows

SCA tooling

Job description

About The Role

Hi, I'm Megan , and I lead the Product Security team at Jane. Product Security work day to day with the developers building the software that 70,000+ clinics use to book, chart, and bill. My view of security is that it's a partnership with developers. The people who do well here can take complex insights and make them digestible for a busy team, and focus on fixing the cause, rather than repeatedly fixing the effects of an issue.

We need a staff-level engineer who can identify the themes that tie together the insights we uncover and work with product teams to better how we build secure software at the architecture level. There's a full roadmap behind that too: changes to how our development lifecycle and GitHub workflows run, private package repositories, maturing our SCA tooling, and a security champions program. You'd lead some of those projects outright.

We also lean into AI on this team, in the back office and in the product. We're already automating reporting and reminders, and the next step is using AI for vulnerability analysis and getting closer to the code with draft fixes. If you've been somewhere that kept AI locked away and you want to build with it, or you're already securing AI features and want to do it at scale, this is a great place for that.

What Impact We're Looking For You To Make

• Turn recurring AppSec findings into architectural fixes by spotting the common themes across vulnerabilities and partnering with product teams to design them out, rather than patching one instance at a time.
• Lead product security projects end to end, starting with private package repositories, maturing our SCA tooling, and the changes to how our development lifecycle and GitHub workflows run.
• Build AI into how the team works, moving us from automated reminders and reporting to AI-assisted vulnerability analysis and draft fixes that land closer to the code. (unconfirmed pending recruiter follow-up)
• Champion secure development across Jane by building trusted relationships with developers, explaining risk in plain language, and helping long-tenured teams adopt new practices without friction.
• Own security initiatives and represent Product Security in cross-functional groups, and mentor teammates as the team's most senior hands-on engineer.

What Experience We Need

• Staff-level application security experience, including owning security initiatives end to end and working directly with development teams.
• A real development background. Ruby on Rails is ideal; Python, Java, or C# with a willingness to get into a Rails codebase works too. You can read a draft PR and tell whether the fix is right.
• Experience finding systemic vulnerability patterns and driving architectural fixes with engineering teams, not only reporting individual findings.
• Strong relationship skills with developers and stakeholders. You make security digestible, you're comfortable pushing back kindly, and people trust you.
• Hands-on experimentation with AI in your security work, ideally building automation rather than one-off use. Experience securing AI features in a product is a strong asset.
• If you don't meet every single qualification but are excited about this role, we'd still love to hear from you.

More About Jane

Jane is a founder-led, high-growth SaaS company with a remote-first team working across Canada, the US, and the UK, united by our mission to help the helpers.

We build the products and tools that thousands of clinics rely on every day to run their businesses, care for their patients, and grow their communities. That level of impact means every person at Jane plays an important role in how we show up for our customers. We're all responsible for being deeply connected to their needs, obsessed with improving their experience, and proud of the difference our work makes in their day-to-day lives.

Jane is growing fast, and that growth brings exciting challenges that call for adaptability, resilience, learning agility, and humility. We're proud of what we've built and quick to admit what we don't know yet. We listen, learn, and adjust as we go. More than 70,000 businesses run on Jane which has 250,000+ practitioners interacting with our product on a daily basis and growth is continuing to accelerate.

We're also embracing the possibilities of AI, using it to work smarter, improve our systems, and create even better experiences for our customers and our team. No matter your role or team, we expect every Janer to be curious, experimenting, and finding new ways to build with AI. We'll make sure you have the tools, support, and space to explore, learn, and share what you discover along the way.

Our goal isn't just delivery - it's delight. We move quickly, communicate openly, and solve real problems together. If you're energized by ambiguity, motivated by impact, and eager to learn with others, you'll thrive at Jane.

Compensation & Benefits

At Jane, we're committed to paying fairly, clearly, and above all, paying for growth. T