Senior Security Engineer - Application Security Faire is a technology wholesale platform built on the belief that the future is local. Independent retailers around the globe collectively represent a multi-hundred-billion-dollar wholesale market that has historically been fragmented and offline. At Faire, we're using the power of tech, data, and machine learning to connect this thriving community of entrepreneurs across the globe.

Picture your favorite boutique in town - we help them discover the best products from around the world to sell in their stores. With the right tools and insights, we believe that we can level the playing field so businesses can grow and local communities can thrive. We're looking for smart, resourceful and passionate people to join us as we power the shop local movement.

If you believe in community, come join ours. Our Engineering organization owns the software that makes our marketplace work.

Our Application

Security function is focused on keeping vulnerabilities out of the code and software as it's built and shipped, owning the SDLC from commit to production. We care about valuable engineering practice and love to write software that is secure, tested, easy to maintain, and can scale to millions of users. listen to the data; As a Senior Security Engineer, Application Security, you'll collaborate with us to: Find and fix vulnerabilities in first-party code and third-party dependencies using AI-powered detection, SAST, DAST, SCA, and secret scanning tooling. Build shift-left tooling and CI/CD guardrails that make the secure path the default in the build pipeline.

Own offensive security engagements such as penetration tests with external vendors. Evaluate and harden the security of AI-assisted code generation workflows. Lead threat modeling and secure design reviews for new products and high-risk platform changes, shaping the architecture before the code is written rather than reviewing it after.





Conduct security reviews and consultations with product and platform teams and develop secure coding standards and scaling frameworks for recurring vulnerability classes. Hands-on experience integrating security into the software development lifecycle. Exposure to offensive security, whether that is running a bug bounty program, scoping penetration tests with external vendors, or finding and reporting real vulnerabilities yourself.

A passion for coding and solving security problems scalably with code and automation, rather than with process and policy. Comfort writing and reviewing code in OOP languages such as Kotlin, Java, Python, or TypeScript, enough to read an unfamiliar service, judge whether a finding is real, and open the pull request that fixes it. A thorough understanding of web application security principles and common vulnerabilities, including OWASP Top 10, with an instinct for the systemic fix behind the individual finding.

Experience working in modern cloud computing environments such as AWS or GCP. The ability to explain risk to product engineers in a way that makes them want to fix it, and the credibility to be invited into design discussions rather than added as a gate. Curiosity about the security of AI-assisted development, and interest in figuring out what changes when a meaningful share of the code is machine-generated.

Kotlin, Typescript, Python This role will also be eligible for equity and benefits. Actual base pay will be determined based on permissible factors such as transferable skills, work experience, market demands, and primary work location. Faire uses Artificial Intelligence (AI)



to screen and select applicants for this position.

Hybrid

Faire employees currently go into the office 3 days per week on Tuesdays, Thursdays, and a third flex day of their choosing (Monday, Wednesday, or Friday). Additionally, hybrid in-office roles will have the flexibility to work remotely up to 4 weeks per year.

Specific

Workplace and Information Technology positions may require onsite attendance 5 days per week as will be indicated in the job posting. You'll own meaningful problems that serve customers around the globe with the agency to move fast and see your results clearly. We invest in what matters, including the latest enterprise AI tools, to help you work smarter and get more out of every day.

Our team is full of sharp, kind, and generous colleagues who care about their craft and about helping you grow in yours. Competitive pay, equity, and comprehensive benefits designed to support your life inside and outside of work.

Belonging: We're intentional about building an environment where every Faire employee has equal access to opportunities, growth, and success. Y Combinator, Lightspeed Venture Partners, Forerunner Ventures, Khosla Ventures, Sequoia Capital, Founders Fund, and DST Global. To learn more about Faire and our customers, you can read more on our blog .

Faire provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or gender expression. Faire is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Accommodations are available throughout the recruitment process and applicants with a disability may request to be accommodated throughout the recruitment process.

📌 Senior Security Engineering Operations (Toronto)
🏢 Faire
📍 Toronto