Product Security Engineer — Own Secure, Scalable Builds

Greptile; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Greptile in San Francisco is seeking a security-focused software engineer to own the product, infrastructure, and internal systems security. You will consult on risky code changes, fix vulnerabilities, and help shape architecture decisions across the stack.

You will design and deploy secure improvements, work closely with engineers to bake security into everyday development, and manage the bug bounty program while coordinating incident responses.

Qualifications

• B.S. Computer Science or equivalent degree, undergraduate or higher.
• 3+ years of software engineering, DevOps, or security engineering experience.
• Experience with JavaScript/TypeScript.
• Deep knowledge of application, infrastructure, and cloud security.
• Experience working on security-critical products and complex architectures.
• Strong judgment when evaluating vulnerabilities, technical tradeoffs, and risk.

Responsibilities

• Own Greptile’s security posture across the product, infrastructure, and internal systems
• Consult on risky code changes and critical architecture decisions
• Fix pentest findings and patch reported vulnerabilities
• Manage our bug bounty program and coordinate vulnerability response
• Design, implement, test, and deploy secure product and infrastructure improvements
• Work directly with engineers to make security part of how we build, rather than a final review step

Skills

JavaScript/TypeScript

Security engineering

Education

B.S. Computer Science or equivalent degree

Job description

Greptile in San Francisco is seeking a security-focused software engineer to own the product, infrastructure, and internal systems security. You will consult on risky code changes, fix vulnerabilities, and help shape architecture decisions across the stack.

You will design and deploy secure improvements, work closely with engineers to bake security into everyday development, and manage the bug bounty program while coordinating incident responses.