Application Security Engineer – Vulnerability & OSS

Glean; Northern (KY); Hybrid; USD 185,000 - 260,000; Full time

Benefits offered by this job

Home office stipend

Education stipend

Wellness stipend

Lunch provided

Job summary

Glean is seeking an experienced Application Security Engineer to fortify our software stack across OSS, base OS images, and the CI/CD pipeline. You will lead vulnerability management, drive secure tooling adoption, and ensure rapid remediation of CVEs with measurable impact.

The role emphasizes cross-functional collaboration, cloud-native security on AWS/GCP, and the use of SAST/DAST, dependency scanning, and security validation. This remote position offers competitive compensation and benefits.

Qualifications

• 8+ years of application security experience.
• Deep understanding of CVEs, OWASP Top 10, and supply chain risks.
• Experience with SAST, DAST, and dependency scanning tools.
• Hands-on cloud-native security across AWS and GCP.

Responsibilities

• Own the vulnerability management lifecycle across Glean’s technology stack.
• Harden base OS images and secure OSS dependencies and package managers.
• Integrate SAST, DAST, dependency scanning into CI/CD pipelines.
• Define secure-coding practices and drive engineering adoption.

Skills

Vulnerability management

SAST/DAST

Cloud security

Cross‑functional leadership

Problem solving

Education

BA/BS in CS or Cybersecurity

Tools

Snyk

GitHub Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Job description

Glean is seeking an experienced Application Security Engineer to fortify our software stack across OSS, base OS images, and the CI/CD pipeline. You will lead vulnerability management, drive secure tooling adoption, and ensure rapid remediation of CVEs with measurable impact.

The role emphasizes cross-functional collaboration, cloud-native security on AWS/GCP, and the use of SAST/DAST, dependency scanning, and security validation. This remote position offers competitive compensation and benefits.