Senior/Lead Application Security Engineer

BioRender Inc; California (MO); Remote; USD 90,000 - 150,000; Full time

Job summary

An innovative firm is seeking a Senior/Lead Application Security Engineer to enhance its application security program. In this pivotal role, you will manage security assessments, integrate CI/CD tools, and conduct thorough code reviews. Your expertise will help shape secure coding practices while proactively identifying potential threats. This remote-first company is dedicated to improving scientific communication and is backed by top investors, making it an exciting opportunity for those passionate about security in the tech space.

Qualifications

• Expertise in web application security and best practices.
• Ability to perform code reviews on NodeJS and React applications.

Responsibilities

• Build and maintain security and CI/CD tooling for automation.
• Drive identification and remediation of application security vulnerabilities.

Skills

Web Application Security

NodeJS Code Reviews

React Code Reviews

SAST/DAST Integration

Cryptography Knowledge

Threat Modeling

Tools

HackerOne

OWASP Methodology

Job description

At BioRender, we’re on a mission to accelerate the world’s ability to learn, discover, and communicate science — transforming how knowledge is shared and making science open, collaborative, and easily understandable by all.

We’re shaping the future of science communication and are looking for talented individuals to help bring this vision to life!

As a Senior/Lead Application Security Engineer, you will drive on-going improvements for SSDLC, bug bounty and the application stack.Your primary responsibility is to manage the on-going application security program, including application risk assessments, CI/CD integration (SAST/DAST), bug-bounty and perform code reviews (NodeJS/React). Working closely with our engineering teams, you will define and manage the processes for how secure code is shipped. You’re excited about the challenge of building security into our workflows while proactively identifying which threats matter.

What you'll be doing

• Build and maintain security and CI/CD tooling for automation.

• Perform penetration testing and code reviews (NodeJS).

• Drive identification and remediation of application security vulnerabilities (SAST/DAST/HackerOne).

• Conduct Bug Bounty issue evaluation, reproduction, and recommendations.

• Test application code using the OWASP methodology.

What you bring to the table

• Expertise in web application security and best practices.

• Ability to perform code reviews on NodeJS, React and related application findings.

• Knowledgeable on integrating and maintaining SAST/DAST systems.

• Experience with Secure Software Development Life Cycles.

• Applied knowledge of cryptography, PKI, TLS and practical implementation of the same.

• Performed threat modeling and have experience of common code and network vulnerability types, impacts, and remediations.

Why join us?

• We are mission-driven: we work collaboratively towards our shared vision of improving scientific communication and accelerating scientific discovery. BioRender figures have appeared in more than 54,000 publications!

• BioRender is loved by millions! We have a world-class NPS and a community of loyal fans and users in 200+ countries!

• Our company is backed by top investors and accelerators like Y Combinator, and we are on a growth trajectory comparable to many top-performing SaaS companies

• We’re remote-first with team members across Canada and the U.S., offering you the flexibility to work from anywhere.

BioRender is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.