[Hiring] Staff Security Engineer @Fullscript

Role Description

We're looking for a Staff Security Engineer to define and drive Fullscript's defensive threat detection, incident response, and AI-assisted SecOps capability across our cloud infrastructure, identity, endpoints, and application ecosystems. This role sits at the technical core of our Security function.

• Architect modern detection systems.
• Leverage AI/ML to automate SecOps workflows.
• Establish defensive testing practices for AI threat vectors.
• Partner with Engineering and Platform teams to ensure detection and response capabilities scale with Fullscript's infrastructure.

What You'll Do

• Detection Engineering & Defensive Strategy
  • Set the multi-quarter technical direction for detection and response.
  • Architect, author, and maintain advanced detection logic across various systems.
  • Establish detection coverage and defensive controls against emerging AI threat vectors.
  • Own the full rule lifecycle and measure it against concrete signals.
  • Create and maintain dashboards and reporting for leadership visibility.
• AI-Augmented Security Operations & Automation
  • Design and deploy AI-assisted investigation workflows.
  • Build and extend internal security tooling.
  • Automate the handoff between detection tooling and ticketing systems.
• Incident Response & Investigations
  • Lead and support security investigations end-to-end.
  • Mentor Security Operations team members.
  • Partner with relevant teams to investigate and remediate security escalations.
  • Maintain and improve response playbooks.
  • Participate in an on-call rotation for security incidents.
• AI Defensive Testing & Validation
  • Threat model new and existing systems.
  • Lead defensive testing and adversarial validation exercises.
  • Partner with teams to ensure necessary logging and telemetry for security monitoring.
  • Evaluate authorization and access-control changes for security-relevant blast radius.
• Threat Intelligence
  • Operationalize threat intelligence into actionable detections.
  • Coordinate indicator of compromise (IOC) blocking across various layers.

Qualifications

• 8+ years of experience in detection engineering, incident response, or security engineering.
• Practical experience incorporating AI tooling into SecOps workflows.
• Strong scripting/automation skills (Python, JavaScript, or similar).
• Experience managing security controls as code (e.g., Terraform).
• Experience securing cloud environments (AWS preferred).
• Hands-on incident response experience.
• Working knowledge of adversary tradecraft (MITRE ATT&CK).
• Proven ability to partner with engineering and infrastructure teams.
• Excellent written communication skills.

Bonus if You Have

• Experience contributing to or building from open detection content.
• Experience collaborating with red/purple-team exercises.
• Experience supporting a healthcare or regulated environment.
• Relevant certifications (GCIH, GCFA, GCTI, GCDA, or equivalent experience).

Benefits

• Generous PTO and competitive pay.
• Fullscript’s RRSP match program for financial health.
• Flexible benefits package and workplace wellness program.
• Training budget and company-wide learning initiatives.
• Discount on Fullscript catalog of products.
• Ability to work Wherever You Work Well.