Remote AppSec Engineer: Vulnerability & OSS Security

Glean; Oregon; Hybrid; USD 185,000 - 260,000; Full time

Benefits offered by this job

Home office stipend

Annual education stipend

Wellness stipend

Daily lunches

Job summary

Glean is seeking an experienced Application Security Engineer to secure our technology stack, including OS images and open-source dependencies. You will lead vulnerability management, integrate SAST/DAST into CI/CD, and drive adoption of Google's Assured OSS and other security tooling across the org.

The role requires 8+ years in app security, strong problem-solving skills, and the ability to balance security with performance.

Qualifications

• 8+ years in application security and vulnerability management.
• Ability to lead security initiatives across engineering teams.
• Experience with SAST, DAST, dependency scanning, and vulnerability tooling.
• Deep understanding of CVEs, OWASP Top 10 and supply chain risks.

Responsibilities

• Own the vulnerability management lifecycle end-to-end.
• Harden base OS images and secure OSS dependencies and supply chain.
• Integrate SAST/DAST and dependency scanning into CI/CD pipelines.
• Evaluate and adopt security solutions like Google's Assured OSS.
• Define secure-coding practices and mentor engineering teams.

Skills

Cross-functional leadership

Problem solving

Security strategy

Cloud security

Education

BA/BS in Computer Science or related field

Tools

Snyk

GitHub Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Job description

Glean is seeking an experienced Application Security Engineer to secure our technology stack, including OS images and open-source dependencies. You will lead vulnerability management, integrate SAST/DAST into CI/CD, and drive adoption of Google's Assured OSS and other security tooling across the org.

The role requires 8+ years in app security, strong problem-solving skills, and the ability to balance security with performance.