Application Security Engineer

Glean is seeking an Application Security Engineer to ensure the security of its entire technology stack. The role involves managing vulnerabilities, securing open-source dependencies, and integrating security tools into the CI/CD pipeline.

Responsibilities

• Own the vulnerability management lifecycle across Glean’s technology stack, from discovery and prioritization through remediation, reporting, and measurement.
• Harden base OS images and secure open-source dependencies, package managers, and the broader software supply chain.
• Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
• Evaluate, adopt, and develop security solutions and tooling, including Google’s Assured OSS and comparable approaches.
• Define secure-coding practices and drive engineering adoption through guidance, training, and mentorship.

Requirements

• BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience).
• 8+ years of experience in application security and vulnerability management.
• Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks.
• Experience with SAST, DAST, dependency scanning, and vulnerability management tools (e.g., Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP).
• Hands-on experience with cloud-native security across AWS, GCP, including containers, Kubernetes, and microservices.
• Ability to lead cross-functional initiatives and drive security adoption across engineering teams.
• Proactive, pragmatic, and collaborative, with strong problem-solving skills and the ability to balance security with performance and usability.

Salary

• The standard base salary range for this position is $185,000 - $260,000 annually.

How to Apply