Senior Full-Stack Software Engineer (Cybersecurity)

Location: Remote from Canada or the United States

Company

Finite State is a Series B cybersecurity company providing visibility, vulnerability intelligence, and remediation guidance for connected devices, embedded systems, and software supply chains.

What you will do

• Build and maintain secure, scalable web applications with Next.js, React, TypeScript, Node, PostgreSQL, and Supabase.
• Design database-centric business logic using Postgres functions, views, triggers, Row-Level Security, migrations, and Supabase Edge Functions.
• Use Cursor, Devin, GitHub Copilot, and agent frameworks to accelerate implementation, refactoring, testing, documentation, and internal automation.
• Implement application security across secure coding, dependency management, authentication, authorization, OAuth2/OIDC, SSO, and data protection.
• Design and optimize APIs, edge endpoints, event flows, multi-tenant data models, indexing, query performance, and partitioning for large-scale workloads.
• Collaborate with product managers, designers, security researchers, and infrastructure engineers while mentoring peers and improving CI/CD, observability, and cloud environments.

Requirements

• Production experience building full-stack applications with Next.js/React, TypeScript, PostgreSQL, and Node or a similar backend runtime.
• Required daily use of AI development tools such as Cursor, Devin, or GitHub Copilot, including understanding their failure modes and verification needs.
• Strong application security knowledge covering secure coding, authentication, authorization, session management, and vulnerability mitigation.
• Deep experience with relational schemas, query optimization, indexes, query plans, and high-volume multi-tenant PostgreSQL databases.
• Experience with cloud application development, ideally AWS; familiarity with Docker, Kubernetes, testing, CI/CD automation, and maintainable code.
• Familiarity with software supply chain risks, SBOMs, CVEs, and vulnerability scanning, or the ability to learn the cybersecurity domain quickly.

Nice to have

• Experience with Supabase administration and performance tuning, including connection pooling, partitioning, and capacity planning.
• Experience designing agentic workflows with Agno, Vercel AI SDK, LangChain, LlamaIndex, or similar frameworks.
• Background in software supply chain security, SBOM analysis, vulnerability intelligence, DevSecOps, or secure CI/CD pipelines.
• Familiarity with Honeycomb, Datadog, Prometheus, or similar observability tools.
• Experience leading product-focused engineering initiatives in cybersecurity startups.

Culture & Benefits

• Fully distributed, remote-first work environment with flexible hours.
• Competitive salary with equity options.
• Fully covered medical, dental, and vision benefits.
• Unlimited paid time off, generous parental leave, and a work-from-home stipend.
• Mission-driven work focused on protecting critical infrastructure, connected devices, and software supply chains.