Staff Security Engineer, AI-Driven Detection & Response in Toronto

About Fullscript
We’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea: make it easier for practitioners to access the products they trust so they can deliver better care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment.

This is your invitation. Bring your ideas, your grit, and your care for people. Join us and shape the future of care.

The Opportunity
We're looking for a Staff Security Engineer to define and drive Fullscript's defensive threat detection, incident response, and AI-assisted SecOps capability across our cloud infrastructure, identity, endpoints, and application ecosystems. This role sits at the technical core of our Security function. You will architect modern detection systems, leverage AI/ML to automate SecOps workflows, and establish defensive testing practices for AI threat vectors.

What You'll Do

• Detection Engineering & Defensive Strategy: Set the multi-quarter technical direction for detection and response, and drive it across Security, Platform, and Engineering teams. Architect, author, and maintain advanced detection logic across SIEM, cloud infrastructure, identity systems, endpoint protection, and AI/ML pipelines. Establish detection coverage and defensive controls against emerging AI and agentic threat vectors. Own the full rule lifecycle, from authoring and testing through tuning and retirement, and measure it against concrete signals.
• AI-Augmented Security Operations & Automation: Design and deploy AI-assisted investigation workflows that leverage LLMs and automated agents to accelerate triage, context enrichment, and threat containment. Build and extend internal security tooling to support identity resolution, cross-source log correlation, and natural-language querying over security telemetry.
• Incident Response & Investigations: Lead and support security investigations end-to-end, from initial triage through containment and resolution. Mentor Security Operations team members and set the standards the team builds against. Partner with relevant teams across the business to investigate and remediate security escalations.
• AI Defensive Testing & Validation: Threat model new and existing systems, including AI agents and services, to identify what could go wrong. Lead defensive testing, purple-teaming, and adversarial validation exercises to test alert fidelity and evaluate detection resilience against AI-driven threats.
• Threat Intelligence: Operationalize threat intelligence into actionable detections and tracked follow-up work. Coordinate indicator of compromise (IOC) blocking across endpoint, network, and web layers.

What You Bring To The Table
8+ years of experience in detection engineering, incident response, or security engineering, with demonstrated leadership in shaping organizational security strategy. Practical experience incorporating AI tooling into SecOps workflows, along with familiarity with detection strategies for AI-specific threat vectors. Strong scripting/automation skills and experience building workflows in a SOAR-style or workflow automation platform. Experience managing security controls as code, with changes made through peer review rather than manual console changes. Experience securing cloud environments and modern SaaS/identity stacks. Hands-on incident response experience: triage, investigation, containment, and postmortem/playbook development. Working knowledge of adversary tradecraft and the ability to translate it into practical, tuned detections.

Bonus if You Have:
Experience contributing to or building from open detection content. Experience collaborating with red/purple-team exercises to validate detection coverage. Experience supporting a healthcare, regulated, or otherwise highly sensitive-data environment. Relevant certifications.

What we can offer you:
Generous PTO and competitive pay. Flexible benefits package and workplace wellness program. Training budget and company-wide learning initiatives. Discount on Fullscript catalog of products. Ability to work Wherever You Work Well.

Why Fullscript
Great work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact.

What To Know Before You Apply
We’re grateful for the interest in joining Fullscript. A quick note: Due to the high volume of applications, we’re not able to respond to phone or email inquiries about application status. Fullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request.