Senior Application Security Engineer
About this role
We are looking for a Senior Application Security Engineer with 6+ years of experience to join a small but high-impact security team and bring an engineering-first mindset to application security. You're someone who started as a software engineer or has always been hands-on with code – you read it fluently, write production-quality fixes, and ship them yourself rather than throwing findings over the fence. You'll help automate away manual security work using AI-native tooling so the team can scale through leverage and focus on broader security architecture. This is a rare opportunity to shape how security is built into an engineering organization that's moving fast, innovating with AI, and serving highly regulated customers.
What you will be doing
Contributing production-quality code directly to the application (Node.js/Python) – shipping security fixes and hardening features yourself, not just filing tickets for engineers to action
Building AI-powered automation to eliminate manual security work (e.g., PR analysis, vulnerability triage) so the team can scale faster and focus on higher-leverage architecture work
Managing the HackerOne bug bounty program end-to-end – evaluating submissions, reproducing issues, and closing findings by shipping fixes
Defining secure-by-design patterns and driving security standards across the application architecture, including for AI-integrated product features
Acting as a security reviewer on RFCs and design documents, pairing with engineers to resolve issues at the source rather than blocking them
Company at a glance
BioRender is a Toronto-based platform that enables scientists to create professional research visualizations using a comprehensive library of biology icons and templates. Founded in 2017 and backed by Y Combinator, it serves researchers across over 100 countries.
What happens next
Skip the application pile. I get you in front of the people who decide.
Confirm the fit
A few questions to make sure this role is the right shape for you. Two minutes.
I pitch you to the company
I write the intro, send it to the founder, and handle the back-and-forth.
A meeting lands on your calendar
When the company wants to meet, I get the call on your calendar. You just show up.
Culture & values
Core values are resourcefulness, curiosity, integrity, empathy, and humility
Tight-knit group bonded by shared commitment to core values
Team is composed of passionate scientists, engineers, science illustrators, designers and entrepreneurs
Nerd out on cool science stuff and solving big problems
Work really hard and sweat the details
Passionate about science communication
Driven to build intuitive, practical products that delight customers
Focus on creating clean, powerful, elegant solutions
Know someone who'd be great for this?
