AppSec Engineer: Vulnerability Lead (Remote)

Kenyan Edu; Northern (KY); Hybrid; USD 185,000 - 260,000; Full time

Benefits offered by this job

Remote work

Competitive compensation

Education stipend

Wellness stipend

401k

Job summary

Glean seeks an experienced Application Security Engineer to secure our stack, focusing on vulnerability management, OSS scanning, and secure CI/CD integration. You will implement SAST/DAST, harden base images, and drive secure-coding practices across engineering teams.

The role requires 8+ years in application security, deep CVE and OWASP Top 10 knowledge, and hands-on cloud-native security in AWS/GCP with containers and Kubernetes. Remote work is available and compensation is competitive.

Qualifications

• 8+ years of experience in application security and vulnerability management.
• Experience with SAST, DAST, dependency scanning, and vulnerability management tools.
• Deep understanding of CVEs, OWASP Top 10, and supply chain risks.

Responsibilities

• Own the vulnerability management lifecycle across the technology stack.
• Harden base OS images and secure OSS dependencies and package managers.
• Integrate SAST/DAST and dependency scanning into CI/CD pipelines.
• Evaluate, adopt, and develop security solutions like Google’s Assured OSS.

Skills

Vulnerability management

SAST

DAST

OSS scanning

Cloud security

Kubernetes

AWS

GCP

Snyk

Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Secure CI/CD

Secure coding practices

Education

BA/BS in Computer Science or Cybersecurity

Tools

Snyk

GitHub Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Job description

Glean seeks an experienced Application Security Engineer to secure our stack, focusing on vulnerability management, OSS scanning, and secure CI/CD integration. You will implement SAST/DAST, harden base images, and drive secure-coding practices across engineering teams.

The role requires 8+ years in application security, deep CVE and OWASP Top 10 knowledge, and hands-on cloud-native security in AWS/GCP with containers and Kubernetes. Remote work is available and compensation is competitive.