Opportunity at
FaireSenior Security Engineer - Application Security
Faire operates a technology-driven wholesale platform designed to connect independent retailers and brands globally, utilizing data and machine learning to support local commerce. The engineering department…
Career Tools
About This Role
Faire operates a technology-driven wholesale platform designed to connect independent retailers and brands globally, utilizing data and machine learning to support local commerce. The engineering department is currently searching for a Senior Security Engineer - Application Security to oversee software security from the initial commit to production deployment. This position centers on safeguarding code bases, preventing vulnerabilities, and establishing secure frameworks across the entire software development life cycle. This role…
Job Description
Faire operates a technology-driven wholesale platform designed to connect independent retailers and brands globally, utilizing data and machine learning to support local commerce. The engineering department is currently searching for a Senior Security Engineer - Application Security to oversee software security from the initial commit to production deployment. This position centers on safeguarding code bases, preventing vulnerabilities, and establishing secure frameworks across the entire software development life cycle.
This role is ideal for an experienced engineer who enjoys solving security challenges through code and automation rather than relying purely on administrative policies. The professional in this position will collaborate closely with product and platform teams to conduct threat modeling, secure design reviews, and vulnerability management. Daily tasks involve utilizing detection tools such as SAST, DAST, SCA, and secret scanning, as well as handling bug bounty programs and penetration testing engagements.
Faire provides a collaborative environment utilizing modern technologies like Kotlin, TypeScript, Python, AWS, Terraform, and Kubernetes. Hybrid employees adhere to an in-office schedule of three days per week, including Tuesdays, Thursdays, and a flexible third day, with an allowance to work remotely for up to four weeks each year. The organization applies artificial intelligence for candidate screening and offers comprehensive rewards including equity, competitive compensation, and benefits.
Responsibilities
- Locate and remediate vulnerabilities in first-party code and third-party dependencies using SAST, DAST, SCA, secret scanning, and AI-powered detection.
- Develop shift-left tooling and continuous integration guardrails to establish security as the default in the build pipeline.
- Manage external penetration tests and oversee offensive security engagements.
- Assess and improve the security posture of AI-assisted code generation workflows.
- Direct the vulnerability management lifecycle and bug bounty program from intake to final remediation.
- Conduct threat modeling and secure architecture reviews for new products and major platform updates prior to code creation.
- Partner with product teams to formulate secure coding standards and scaling frameworks for common vulnerability types.
Requirements
- Demonstrated hands-on experience embedding security into the software development life cycle.
- Background in driving vulnerability remediation across different teams, setting severity levels, and enforcing SLAs.
- Exposure to offensive security practices such as running bug bounty programs, scoping penetration tests, or independently discovering vulnerabilities.
- Proficiency in reading and writing object-oriented programming languages such as Kotlin, Java, Python, or TypeScript to investigate issues and submit pull requests.
- Practical background deploying and tuning AppSec detection tools like SAST, DAST, SCA, or secret scanning to minimize false positives.
- Solid understanding of web application security principles, the OWASP Top 10, and systemic remediation strategies.
- Experience performing threat modeling on complex systems and determining when formal designs are necessary.
- Familiarity with modern cloud computing infrastructures including AWS or GCP.
Qualifications
- Curiosity regarding the security implications of AI-assisted development and machine-generated code.
Core Skills
Benefits
- Competitive financial compensation
- Equity options
- Comprehensive benefits package
- Access to enterprise AI tools and modern infrastructure
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this position?
The posting specifies that this is a full-time position.
What is the remote work policy?
This is a hybrid role. Employees work from the office three days per week on Tuesdays, Thursdays, and a flex day of their choice, with up to four weeks of remote work flexibility per year.
What salary does this role offer?
For Canada-based roles, the annual pay range is listed between $160,000 and $220,000, alongside equity and benefits. The posting does not specify salary ranges for other locations.
Does Faire use AI during the hiring process?
Yes, Faire uses artificial intelligence to screen and select applicants for this job opening.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
