Remote App Security Engineer — Vulnerability & OSS Champion

Zim Directory; Northern (KY); Hybrid; USD 185,000 - 260,000; Full time

Benefits offered by this job

Medical coverage

Vision coverage

Dental coverage

Generous time-off

Job summary

Glean is seeking an experienced Application Security Engineer to ensure our stack is free of vulnerabilities, secure OSS, and integrated security tooling across CI/CD pipelines. The role leads our vulnerability management charter and drives proactive protection of infrastructure.

Ideal candidates bring 8+ years in security, expertise in CVEs and OWASP Top 10, and hands-on experience with SAST/DAST, cloud security, and containerized environments.

Qualifications

• BA/BS in Computer Science, Cybersecurity, or related field (or equivalent).
• 8+ years of experience in application security and vulnerability management.
• Deep understanding of CVEs, OWASP Top 10, and supply chain risks.

Responsibilities

• Own the vulnerability management lifecycle across the technology stack, from discovery to remediation and reporting.
• Harden base OS images and secure OSS dependencies, package managers, and the software supply chain.
• Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
• Evaluate, adopt, and develop security solutions and tooling (e.g., Google’s Assured OSS).
• Define secure‑coding practices and drive engineering adoption through guidance and mentorship.

Skills

Application security

Vulnerability management

SAST/DAST

Cloud security

Kubernetes

OWASP Top 10

CVEs

Security tooling

Education

BA/BS in CS or related field

Tools

Snyk

GitHub Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Job description

Glean is seeking an experienced Application Security Engineer to ensure our stack is free of vulnerabilities, secure OSS, and integrated security tooling across CI/CD pipelines. The role leads our vulnerability management charter and drives proactive protection of infrastructure.

Ideal candidates bring 8+ years in security, expertise in CVEs and OWASP Top 10, and hands-on experience with SAST/DAST, cloud security, and containerized environments.