Glean Posted 30+ days ago

Application Security Engineer

Location

Remote

Full remote

Contract

Permanent

Full-time

Salary

$185–260k

Gross per year

Experience

8+ years

Lead level

Job summary

Responsibilities

Glean is looking for an experienced Application Security Engineer with a primary focus on ensuring that our entire technology stack is free of software vulnerabilities (CVEs). This role is responsible for securing our base OS images, ensuring all open-source software (OSS) dependencies are scanned…

Own the vulnerability management lifecycle across Glean’s technology stack, from discovery and prioritization through remediation, reporting, and measurement.
Harden base OS images and secure open-source dependencies, package managers, and the broader software supply chain.
Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
Evaluate, adopt, and develop security solutions and tooling, including Google’s Assured OSS and comparable approaches.
Define secure-coding practices and drive engineering adoption through guidance, training, and mentorship.

What they're looking for

BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience).
8+ years of experience in application security and vulnerability management.
Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks.
Experience with SAST, DAST, dependency scanning, and vulnerability management tools (e.g., Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP).
Hands-on experience with cloud-native security across AWS, GCP, including containers, Kubernetes, and microservices.