Software Developer, Security & Compliance

Affygility Solutions helps pharmaceutical manufacturers around the world keep their workers and patients safe. Our SaaS platform, OEL Fastrac+, gives EHS and quality teams the occupational and product quality toxicology data regulators require and we're rebuilding how that data gets produced, with AI doing the heavy lifting and expert toxicologists standing behind every result. Our customers are some of the world's largest drug manufacturers, and they hold us to a high bar: the data we produce has to be trustworthy, tamper-evident, and defensible. We're hiring a developer to own that bar. You'd build features on our Rails platform like the rest of the team, but with a specific mandate - the security, data integrity, and audit practices that get us to SOC 2 Type 2 and ISO 27001, and the digital signatures that make our documents legally and scientifically sound. You'd work directly with the people who set product direction. No layers, no ticket mills. What you'll work on - Design and implement the data integrity and security controls behind a SOC 2 Type 2 and ISO 27001 program ‚ access controls, audit logging, encryption, change management, and the evidence that proves they work - Build digital signature workflows into OEL Fastrac+ so toxicology reports are signed, tamper-evident, and verifiable by customers and regulators - Ship new features for OEL Fastrac+, our Ruby on Rails SaaS platform, with security built in rather than bolted on - Harden APIs and integrations that put our data inside the systems our customers already use - Partner with leadership and auditors to turn control requirements into working software and clean evidence. What we're looking for - 5+ years building production web applications with Ruby on Rails, including: - Rails, Ruby scripting, HTML/CSS, PostgreSQL - API design and integration - Cloud platforms: Heroku, AWS, Git/GitHub - Familiarity with Stripe, Redis, S3, and cross-browser compatibility - Agentic coding using LLMs like Claude Code or Codex - Hands-on experience designing and implementing the data integrity and security processes and practices required for SOC 2 Type 2 and ISO 27001 - not just checking boxes, but building the controls and the evidence behind them - Experience integrating digital signatures into a SaaS platform (e.g., PKI, X.509 certificates, signing services, or standards like PAdES/CAdES), and an understanding of what makes a signature tamper-evident and verifiable - Solid SQL and experience designing data-heavy applications where accuracy and auditability matter - Comfort working independently in a small remote team - you scope your own work, ask good questions, and ship - Clear written communication; we're a distributed company and most decisions happen in writing - US-based and authorized to work in the US Nice to have: experience in a regulated industry (pharma, medical devices, healthcare); familiarity with 21 CFR Part 11, GxP, or electronic records/electronic signature requirements; exposure to LLM APIs; or a track record shepherding an organization through its first SOC 2 or ISO 27001 audit. What we offer - $90,000 to $115,000 base salary, depending on experience - Fully remote within the US - Direct impact ‚Äî trust and compliance are what let us sell to the world's largest drug manufacturers, and this role owns them - A profitable, stable company that's been serving the pharmaceutical industry for over two decades - Health benefits, 401(k), and paid time off How to apply Send a resume and a short note about a security or integrity problem you've solved in production ‚a control you designed, an audit you got through, a signing workflow you shipped ‚ and what you'd do differently now. Applications without a note will get rejected. Additionally, candidates that progress to later stages in the interview process will be required to complete an online, video-recorded test. Affygility Solutions is an equal opportunity employer.