Fullscript

Health Technology

CloudSecurityEngineer

CA$126–176k ~AI est. Ottawa, Ontario, Canada FULL TIME Remote Friendly
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Mid+ candidates.

The Brief

“Cloud Security Engineer at Fullscript. Skills: Cloud Security, Infrastructure as Code, Automation, Security Controls. Design cloud security controls. Implement cloud security controls”

Industry & Context.

Health Technology
Problems you'll solve

Solving complex infrastructure problems

What They're Looking For.

Must Have

4+ years security engineering experience, 2+ years cloud security experience, Hands-on infrastructure-as-code experience, Write code in Python, Go, or similar

Nice to Have

Experience in healthcare, Experience in fintech, Hands-on CSPM or CNAPP tools experience, Experience securing Ruby on Rails, Experience securing JavaScript, Experience securing TypeScript, Experience securing GraphQL, Experience securing containerized workloads, Experience securing modern cloud-native applications, Cloud incident response experience, Cloud forensics experience, Cloud threat hunting experience, Experience securing AI/ML workloads, Experience securing LLM integrations, Experience securing data science platforms, Experience securing autonomous AI systems, Experience securing non-human identities, Familiarity with AI/ML model supply chain risks, Familiarity with AI-specific SBOMs, Familiarity with controls for limiting blast radius, Familiarity with controls for privilege escalation, Open-source contributions, Experience building internal security tooling

What You'll Do.

Design cloud security controls

Implement cloud security controls

Build reusable Terraform modules

Build reference architectures

Build policy-as-code guardrails

Build self-service tooling

Operate CSPM/CNAPP tooling

Tune CSPM/CNAPP tooling

Identify misconfigurations

Identify toxic combinations

Identify coverage gaps

Drive remediation of vulnerabilities

Drive remediation of misconfigurations

Strengthen secrets management

Strengthen key rotation

Strengthen cloud credentials

Strengthen machine identities

Strengthen just-in-time access

Embed security into CI/CD

Partner on cloud-native detections

Partner on incident response

Partner on post-incident learning

Partner on secure AI/ML workload patterns

How You'll Work.

Team & Collaboration

Partner with engineering teams; Work with Security Engineering; Work with GRC; Work with SOC; Work with Platform Engineering; Work with product teams

Full Job Description

## Description About Fullscript We’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care. That simple idea grew into a platform that powers every part of care. Today, more than 125,000 practitioners use Fullscript for clinical insights, lab interpretations, patient analytics, education, and access to high-quality supplements. Over 10 million patients rely on Fullscript to stay connected to their care plans and follow through on treatment. We build tools that make care smarter and more human. Tools that save time, simplify decisions, and help practitioners stay closely connected to the people they care for. When everything they need is in one place, they can focus on what matters most: helping people get better. This is your invitation. Bring your ideas, your grit, and your care for people. Join us and shape the future of care. The Opportunity Fullscript is looking for a Cloud Security Engineer to help secure the cloud platforms that power care delivery for millions of patients. In this role, you’ll partner with engineering teams to design, build, and operate secure-by-default cloud infrastructure across AWS and Google Cloud. You’ll help protect sensitive health data, harden our cloud footprint, automate guardrails, and move cloud security from project-by-project work into a scalable, programmatic practice. You’ll work closely with Security Engineering, GRC, SOC, Platform Engineering, and product teams to prevent, detect, and respond to cloud-native threats. This is a hands-on engineering role for someone who likes solving complex infrastructure problems with code, cares about helping teams ship securely, and wants their work to support better patient outcomes. What you'll do Design and implement cloud security controls across AWS and Google Cloud, including multi-account architecture, network s

Free ATS check

Applying for this Cloud Security Engineer role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Lever

  • Lever uses a streamlined one-page form — apply in under 5 minutes.
  • LinkedIn import works well; review parsed data before submitting.
  • The cover letter field is optional but visible to reviewers — use it to differentiate.
  • Referral codes from employees can significantly boost visibility of your application.

ANONYMOUS · UNFILTERED

What do employees actually say about Fullscript?

Real rants from real employees. Read before you apply.

Read Company Rants →