AppSec Engineer: Vulnerability & OSS Guard (Remote)

Writing

Northern (KY)

Hybrid

USD 185,000 - 260,000

Full time

32 hours ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical coverage

Vision coverage

Dental coverage

Time-off policy

401k plan

Home office stipend

Education stipend

Wellness stipend

Regular events

Healthy lunches daily

Job summary

Glean is seeking an experienced Application Security Engineer to secure our tech stack, patch OS images, scan OSS, and integrate security tooling into the CI/CD pipeline. The role leads vulnerability management and security tooling adoption across engineering teams.

Ideal candidates have 8+ years in application security, strong knowledge of CVEs and OWASP Top 10, and hands-on experience with SAST/DAST and cloud-native security in AWS/GCP.

Qualifications

8+ years in application security and vulnerability management.
Experience with SAST/DAST and OSS scanning tools.
Deep understanding of CVEs, OWASP Top 10, and supply chain risks.

Responsibilities

Own vulnerability management lifecycle across the tech stack.
Harden base OS images and secure OSS dependencies.
Integrate SAST, DAST, and dependency scanning into CI/CD pipelines.
Evaluate, adopt, and develop security solutions and tooling.
Define secure-coding practices and drive engineering adoption.

Skills

Vulnerability management

Secure coding practices

CI/CD security

SAST/DAST tooling

Cloud security (AWS/GCP)

Leadership

OWASP Top 10

Education

BA/BS in Computer Science or Cybersecurity

Tools

Snyk

GitHub Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Kubernetes

Docker

Job description

Ideal candidates have 8+ years in application security, strong knowledge of CVEs and OWASP Top 10, and hands-on experience with SAST/DAST and cloud-native security in AWS/GCP.

Get your free, confidential resume review.

or drag and drop your file here.