Senior Application Security Engineer

Help shape the future of scientific discovery

Join us in building the next generation of AI-powered tools that help scientists work smarter, communicate ideas, and accelerate discovery. Already trusted by over 4 million scientists worldwide, we're just getting started.

"BioRender (W18) is in the top 1% of YC companies. With AI reshaping biology research, BioRender holds unique insight into the future of science. We led their Series A because I saw the metrics firsthand - insane growth, operational excellence, and customer love unlike anything else. They've definitely one to watch — don't miss out on this rocket ship. "

Garry Tan

Senior Application Security Engineer

Location

Remote (Canada); Remote (US)

Employment Type

Full time

Location Type

Remote

Department

At BioRender, we're on a mission to accelerate the world's ability to learn, discover, and communicate science – transforming how knowledge is shared and making science open, collaborative, and easily understandable by all.

We're shaping the future of science communication and are looking for talented individuals to help bring this vision to life!

BioRender is seeking a Senior Application Security Engineer to join our Security team – an engineer first, who contributes directly to the codebase rather than managing security from the sidelines. You'll help define how security is built into our engineering organization, contributing production code across our application (Node.js/React/Python) and infrastructure (Python, Terraform, AWS, Cloudflare) while shaping secure-by-design patterns, CI/CD automation, and engineering workflows that let the company move quickly and safely.

You'll work AI-natively, using AI coding assistants and agentic tooling to accelerate your own work while helping secure the AI-powered capabilities we're building. If you're excited by building developer-friendly security systems, solving meaningful engineering problems, and focusing on the threats that actually matter, we'd love to hear from you.

What you'll do

Contribute production-quality code directly to the application (Node.js/React) and infrastructure (Python, Terraform) – you ship fixes and hardening yourself, not just findings for others to action.

Build and maintain security and CI/CD tooling for automation, keeping the secure path the default path.

Act as a security reviewer on RFCs and design documents, and pair with engineers to resolve issues at the source.

Define secure-by-design patterns and drive standards for authentication, authorization, and API security.

Lead threat modeling on new and existing systems and turn those models into shipped controls.

Own and evolve the Secure SDLC and CI/CD security integration (SAST/DAST/SCA/secrets) – tuned for high signal and low noise.

AI-native security & automation

Work AI-natively: use AI coding assistants and agentic tooling to accelerate code review, triage, and tooling development.

Secure AI-integrated product features – reasoning about prompt injection, data leakage, and over-scoped tool, token, and data access.

Automate recurring security work so the team scales through leverage, not headcount.

Web & product security (active defense)

Perform penetration testing and code reviews (Node.js/React) using OWASP methodology.

Drive identification and remediation of application security vulnerabilities (SAST/DAST/HackerOne).

Own the bug bounty program end to end – issue evaluation, reproduction, and closing findings by shipping fixes.

What you bring:

Demonstrable software engineering ability – you read code fluently, write production-quality code that engineers respect, and have contributed to real codebases (Node.js/React; Python a plus).

Fluency using AI development tools (AI coding assistants, agentic workflows) to get the job done, and a clear-eyed view of the security risks they introduce.

Expertise in web application security and secure-coding best practices, and the ability to review code and application findings.

Experience integrating and maintaining SAST/DAST systems within CI/CD, and with Secure Software Development Life Cycles.

Hands-on experience securing cloud workloads on AWS and comfort with infrastructure-as-code (Terraform or equivalent); familiarity with Cloudflare a plus.

Threat-modeling experience and command of common code and network vulnerability types, their impact, and remediation.

Applied knowledge of cryptography, PKI, and TLS and their practical implementation.

Nice to have:

Experience hardening LLM-integrated or AI-powered features in production.

Experience operating a bug bounty program (e.g. HackerOne).

Contributions to SOC 2 control design and audit readiness from the engineering side.

Relevant certifications (e.g. OSCP, OSWE, AWS Security Specialty) – valued, but not a substitute for engineering ability.

We are mission-driven : we work collaboratively towards our shared vision of improving scientific communication and accelerating scientific discovery. BioRender figures have appeared in more than 54,000 publications!

BioRender is loved by millions! We have a world-class NPS and a community of loyal fans and users in 200+ countries!

Our company is backed by top investors and accelerators like Y Combinator, and we are on a growth trajectory comparable to many top-performing SaaS companies

We're remote-first with team members across Canada and the U.S., offering you the flexibility to work from anywhere.

BioRender is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. By submitting this application, you consent to the processing of your personal data by BioRender in accordance with GDPR and our Privacy Policy.

Our values

BioRender is a company of passionate problem-solvers at the intersection of science and technology. We’re building a visual language that will help unlock discoveries in Biology.

How we work

Small teams, big impact

We work in small teams where you'll have real ownership, meaningful responsibility, and the opportunity to shape what we build.

Work remotely from the US or Canada, with access to our Toronto office and the flexibility to work from abroad for up to three months a year.

Time together

We bring teams together throughout the year for planning, hackathons, and team building.

Perks and benefits

Competitive compensation

Competitive salaries, meaningful equity ownership, and regular compensation reviews.

Flexible time off

Flexible vacation, paid sick days, and additional company Recharge Days to rest and reset.

Comprehensive health and dental coverage, mental health support, and our PAW pet wellness benefit.

Parental leave benefits

Paid parental leave to support growing families, plus a new baby bonus.

An annual professional development allowance to invest in your skills and growth.

Below is an example of what you can typically expect from our interview process, though the number and order of interviews may vary depending on the position.

Get to know BioRender, share your background, and learn more about the opportunity.

Dive deeper into your experience, skills, and how they align with the role.

Practical assessment

Showcase your approach to solving problems through a role-relevant exercise.

Work History interview

Walk us through your career, key accomplishments, and the impact you've made.

Leadership interview

Explore how you approach decisions, collaboration, and our company values.

Reference checks

We'll connect with former managers and colleagues to learn more about your experience and contributions.

Join our award-winning team

We’re shaping the future of science communication and are looking for talented individuals to help bring our vision to life!