Application Security Engineer

Details

Glean is seeking an experienced Application Security Engineer to ensure that its technology stack is free of software vulnerabilities and to lead the vulnerability management charter. The role focuses on securing base operating system images, scanning and patching open-source software dependencies, and integrating security tools into CI/CD pipelines. The engineer will also evaluate solutions such as Google's Assured Open Source Software (OSS) and develop processes to proactively protect Glean's infrastructure.

Responsibilities

• Own the vulnerability management lifecycle across Glean's technology stack, from discovery and prioritization through remediation, reporting, and measurement.
• Harden base OS images and secure open-source dependencies, package managers, and the broader software supply chain.
• Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
• Evaluate, adopt, and develop security solutions and tooling, including Google's Assured OSS and comparable approaches.
• Define secure-coding practices and drive engineering adoption through guidance, training, and mentorship.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent industry experience.
• 8+ years of experience in application security and vulnerability management.
• Deep understanding of software security vulnerabilities, including CVEs, the OWASP Top 10, and software supply chain risks.
• Experience with SAST, DAST, dependency scanning, and vulnerability management tools such as Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, and OWASP ZAP.
• Hands-on experience with cloud-native security across AWS and GCP, including containers, Kubernetes, and microservices.
• Ability to lead cross-functional initiatives and drive security adoption across engineering teams.
• Proactive, pragmatic, and collaborative approach, with strong problem-solving skills and the ability to balance security with performance and usability.
• Candidates will complete a brief AI-focused exercise or discussion during the interview process.

Location

• Remote within the United States.

Compensation and Benefits

• Standard base salary range of $185,000–$260,000 annually.
• Certain roles may be eligible for variable compensation, equity, and benefits.
• Medical, vision, and dental coverage.
• Generous time-off policy and 401(k) plan.
• Home office improvement stipend.
• Annual education and wellness stipends.
• Regular company events and healthy lunches daily.
• Commitment to a diverse and inclusive workplace.