Canada onlyOur Mission: Safety secures the software supply chain for the world's data and development teams. We protect everywhere packages are actually used, from local developer machines to production environments, from traditional IDEs to AI coding assistants without disrupting existing workflows. We're building the infrastructure that will secure companies and shape how enterprises adopt AI-driven development safely.
Requirements
- Hunt Malicious Packages: Analyze suspicious packages across PyPI, npm, and Maven in real-time, developing detection rules that protect customers before threats reach production
- Enrich Vulnerability Data: Review and validate vulnerabilities, adding reachability analysis and context that makes Safety's database more accurate than baseline sources like OSV
- Reduce False Positives: Refine our own tooling and the detection logic by analyzing flagged packages, documenting patterns, and optimizing rules to improve customer trust
- Build AI-Driven Detection Systems: Collaborate with data engineers to develop LLM-assisted analysis tools and automated detection processes that scale to 70,000+ daily package releases
- Drive Research Innovation: Experiment with AI-powered techniques for vulnerability detection, changelog analysis, and threat identification to stay ahead of emerging attacks
- Ship with Velocity: Embrace fast-paced iteration, deliver detection improvements quickly, refine based on customer feedback, and see your work protect thousands of developers and environments within days
- Establish Thought Leadership: Contribute original research through blog posts and conference presentations that position Safety as an industry leader in supply chain security
Benefits
- Competitive salary: 120,000 CAD - 150,000 CAD (depending on experience)
- 20 days paid vacation per year
- Private Healthcare Plan
- Generous equity stock options to share in our success
- Ability to work remotely and thrive in an adaptable, inclusive environment
- Flexible working hours, providing responsibilities are effectively managed
