--- title: 'Staff, Security Engineer at Fullscript' canonical: 'https://feeny.ai/job/staff-security-engineer-fullscript-ottawa-m50kyyvkk1ff' type: 'job' last_seen: '2026-09-13' --- # Staff, Security Engineer at Fullscript - **Company:** Fullscript - **Location:** Ottawa, Canada - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-06-05 - **Last confirmed live:** 2026-09-13 - **Apply:** https://jobs.lever.co/fullscript/b4474afd-c31d-499a-b959-dae8082b732d ## Job description ## About Fullscript We’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care. That simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment. We build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better. This is your invitation. Bring your ideas, your grit, and your care for people. Join us and shape the future of care. The Opportunity We're looking for a Staff Security Engineer to join Fullscript's Security Engineering team as a senior technical leader and hands-on builder. This role is ideal for someone who started their career in software engineering and developed deep expertise in security engineering, application security, or product security. You'll work closely with engineering teams to design and implement security solutions that scale across Fullscript's products and platforms. As a Staff-level engineer, you'll own complex technical initiatives, help shape security strategy, and influence how security is built into the software development lifecycle. You'll be expected to balance hands-on execution with technical leadership, mentoring engineers and helping teams solve security challenges in a way that supports both business objectives and engineering velocity. We're looking for someone who has owned systems end-to-end; from application development and infrastructure decisions through security design and implementation; Understands how to build secure, scalable solutions in production environments. The ideal candidate is deeply technical, highly collaborative, and energized by solving difficult problems that span multiple teams, systems, and domains. ## What you'll do Lead the design and implementation of security solutions across Fullscript's applications, platforms, and AI-powered systems. Partner with engineering teams to embed security throughout the software development lifecycle, including architecture reviews, threat modeling, secure coding practices, and design reviews. Drive application security, product security, and vulnerability management initiatives from concept through implementation. Own complex security challenges that span multiple teams, balancing technical requirements, business priorities, and engineering constraints to deliver scalable solutions. Mentor engineers and security practitioners, raising the bar for secure software development and helping teams make sound security decisions. Influence technical strategy and security standards through hands-on engineering, technical leadership, and cross-functional collaboration. Stay ahead of emerging threats, security technologies, and AI-specific risks to help shape Fullscript's long-term security posture. ## What you bring to the table 8+ years of software engineering experience designing, building, and operating production systems. 3+ years of recent experience in application security, product security, security engineering, or a related security discipline. Deep understanding of secure software development, modern application architectures, APIs, and cloud-native environments. Experience owning complex technical initiatives from problem definition through delivery, including working across multiple teams and stakeholders. Proven ability to influence technical direction, mentor engineers, and drive adoption of security best practices. Strong hands-on experience with security tooling, automation, vulnerability management, and security assessments. Excellent communication skills, strong technical judgment, and a continuous learning mindset. Bonus if you have Experience securing Ruby on Rails, Node.js, JavaScript, GraphQL, or similar application ecosystems. Experience with AWS cloud security and cloud-native security controls. Experience with threat modeling methodologies such as STRIDE, PASTA, or similar frameworks. Experience with vulnerability management, application security posture management, or developer security tooling. Familiarity with GitHub, GitLab, Wiz, static analysis tools, secret scanning, or related security platforms. Experience conducting penetration testing, security research, or ethical hacking activities. Experience protecting healthcare, regulated, or sensitive customer data. ## What we can offer you Remote-first flexibility to work where you work best, with North America (Ottawa, Toronto, or Calgary) preferred for this role. Flexible PTO and competitive pay, because work-life balance matters RRSP/401k match and competitive compensation packages to invest in your future Premium benefits package with customizable coverage, paramedical services, and an HSA. Fullscript discounts to save on high-quality wellness products Continuous learning opportunities to grow your skills and career ## Why Fullscript Great work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door. What to Know Before You Apply We’re grateful for the interest in joining Fullscript. To make sure your application reaches our hiring team, please apply directly through our careers page. A quick note: Due to the high volume of applications, we’re not able to respond to phone or email inquiries about application status. If there’s a match, our team will reach out directly. Fullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request at accommodations@fullscript.com. All offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws. We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S. Learn More www.fullscript.com @fullscriptHQon instagram @fullscripton YouTube FullScript on LinkedIn ## About Fullscript ## Company Overview - **One-liner**: Fullscript is a provider-led healthcare platform that empowers clinicians to deliver personalized, integrative care through supplement management, lab testing, and practice tools. - **Entity Type**: Private (Series C stage based on total funding of $273.1M) - **Headquarters**: Ottawa, Ontario, Canada - **Founded**: 2011 - **Founders**: Not publicly listed on main sources; the company was founded in 2011. ## Core Business - **Primary industry**: Healthcare Technology (HealthTech) / Integrative Medicine - **Target customers**: B2B – licensed healthcare providers (naturopaths, functional medicine doctors, chiropractors, nutritionists, MDs) and their patients (B2B2C model) - **Mission statement**: "Make care easier for providers to deliver and patients to receive" by building a healthcare platform that amplifies a provider's reach and expertise, rather than replacing human connection with algorithms. ## Products & Services - **Supplement Management Platform**: The core product – a digital formulary and e-commerce platform that allows providers to prescribe, manage, and auto-ship over 20,000+ vetted supplement products to patients. Includes wholesale ordering integration (via Natural Partners) and patient-facing dispensaries. - **Fullscript Assist**: A HIPAA-compliant AI assistant that reads lab results, surfaces evidence-based recommendations, and drafts personalized treatment plans in minutes. - **Lab Testing (via Rupa Health acquisition)**: Integrated lab ordering and result management, connecting diagnostics to treatment planning. - **Fullscript Journeys**: Automated patient onboarding and care plan delivery tool with provider branding and clinical guidance built in. - **Quality Assurance Program**: Annual cGMP certification verification for all brands, plus independent blind purity/potency testing of 250 products per quarter by end of 2026. ## Market Standing - **Valuation**: Not publicly disclosed - **Key Metrics**: - **Annual Revenue**: $450M (per LinkedIn data) - **Total Funding**: $273.1M across 4 rounds - **Provider Base**: 125,000+ licensed clinicians - **Patient Reach**: 10+ million patients - **Headcount**: 609 employees (+23.6% YoY growth, +148 people) - **Notable Investors/Partners**: Kayne Partners (Series B, $25M in 2019), HGGC and Snapdragon Capital Partners ($240M strategic growth investment in 2021). Acquired Emerson Ecologics in 2021 and Rupa Health in October 2024. - **Growth Signals**: 23.6% headcount growth year-over-year; strategic acquisition of Rupa Health (Oct 2024) to add lab testing capabilities; expansion of AI-powered clinical tools (Fullscript Assist); physical distribution centers in Phoenix, Lancaster, Riverside, Colonial Heights, and Lenexa. ## Competitive Advantages - **Provider-led model**: Unlike many digital health platforms that attempt to replace clinicians, Fullscript builds tools to amplify provider expertise, creating strong stickiness with the 125,000+ practitioners who rely on it. - **Vetted catalog and quality assurance**: A rigorous, independently-verified supplement quality program (cGMP certification, blind testing) that builds trust with clinicians and patients. - **Integrated ecosystem**: Combines supplement dispensing, lab testing, AI-assisted planning, and patient engagement in a single platform – reducing fragmentation for practitioners. - **15 years of prescribing data**: Real-world outcomes data from millions of patients and thousands of clinicians provides a unique network effect and clinical intelligence moat. ## Strategic Focus - **AI-powered clinical tools**: Rolling out Fullscript Assist to reduce manual work for providers and accelerate personalized care planning. - **Diagnostics integration**: Deepening the lab testing and biomarker analysis capabilities following the Rupa Health acquisition. - **Expanding the care journey**: Moving beyond supplements into full-spectrum practice management (lifestyle, adherence, patient engagement). - **National distribution**: Operating five distribution centers across the US to ensure rapid, reliable delivery of supplements to patients. ## Why Work Here - **Culture**: Emphasizes "Wherever You Work Well" – a flexible hybrid model where teammates choose in-office, remote, or a mix. Physical hubs in Ottawa (Constitution Square) and virtual hubs across Canada and the US. - **Perks & Benefits**: - Tailored medical, dental, vision, and HSA/FSA benefits - Stock option incentives - RRSP and 401k matching - Flexible PTO plus paid public holidays - Employee discounts on the entire Fullscript catalog - Office amenities: fitness facilities, ping pong, games, unlimited snacks and caffeinated beverages - **Community & Events**: Town halls, hackathons, "Fullhouse" events, offsites, teams, and clubs. Employee Resource Groups (ERGs) and a DEIB Council. - **Engineering Culture**: Emphasis on using AI to amplify human capabilities; 21 jobs available at time of research (including Compliance Lead and likely engineering roles). - **Global Team**: Employees across 7 countries (Canada, US, Philippines, Germany, UK, and others). ## Sources 1. [fullscript.com](https://fullscript.com/about) 2. [fullscript.com](https://fullscript.com/careers) 3. [fullscript.com](https://fullscript.com/) 4. [linkedin.com](https://linkedin.com/company/fullscript) ## Other roles at Fullscript - [Senior Machine Learning Engineer](https://feeny.ai/job/senior-machine-learning-engineer-fullscript-ottawa-z5sfy69ade9r) — Ottawa, Canada - [Customer Support Specialist (Calgary, AB)](https://feeny.ai/job/customer-support-specialist-calgary-ab-fullscript-ottawa-86heaq2w1k8p) — Ottawa, Canada - [Customer Support Specialist (Ottawa, ON)](https://feeny.ai/job/customer-support-specialist-ottawa-on-fullscript-ottawa-6zd6ccbcd2eh) — Ottawa, Canada - [Customer Support Specialist -(Kelowna, BC)](https://feeny.ai/job/customer-support-specialist-kelowna-bc-fullscript-kelowna-7f74gv0dfpd8) — Kelowna, Canada - [Senior Warehouse Operations Manager](https://feeny.ai/job/senior-warehouse-operations-manager-fullscript-ashland-zr5t0wwbeh0z) — Ashland, VA - [Staff Engineer](https://feeny.ai/job/staff-engineer-fullscript-ottawa-hpma1h4cht2w) — Ottawa, Canada - [AI Enablement Specialist](https://feeny.ai/job/ai-enablement-specialist-fullscript-toronto-76bv0q3fkrn8) — Toronto, Canada - [Governance, Risk & Compliance (GRC) Manager](https://feeny.ai/job/governance-risk-compliance-grc-manager-fullscript-ottawa-33je9cd7zf9n) — Ottawa, Canada - [Engineering Manager, Patient Experience](https://feeny.ai/job/engineering-manager-patient-experience-fullscript-ottawa-ae7kx7shfp60) — Ottawa, Canada - [Warehouse Associate (Chandler, AZ)](https://feeny.ai/job/warehouse-associate-chandler-az-fullscript-phoenix-mvjqh2y63mck) — Phoenix, AZ