Remote AppSec Engineer: Vulnerability & OSS Security

NEPSE Trading

United States

On-site

USD 185,000 - 260,000

Full time

5 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Home office stipend

Education stipend

Wellness stipend

Healthy lunches

Job summary

Glean is seeking an experienced Application Security Engineer to ensure our tech stack is free of vulnerabilities, secure base OS images, and patched OSS dependencies. You will integrate cutting-edge tools into CI/CD and lead the vulnerability management charter to protect our infrastructure.

The role requires 8+ years in security, deep knowledge of CVEs/OWASP Top 10, and hands-on experience with SAST/DAST and cloud-native security across AWS and GCP.

Qualifications

8+ years of experience in application security and vulnerability management.
Experience securing base OS images and OSS dependencies.
Proficient with cloud-native security for AWS and GCP, containers and Kubernetes.

Responsibilities

Own the vulnerability management lifecycle across the tech stack from discovery to remediation.
Harden base OS images and secure OSS dependencies and package managers.
Integrate SAST, DAST, dependency scanning into CI/CD pipelines.
Evaluate and adopt security solutions such as Google’s Assured OSS.
Define secure-coding practices and drive engineering adoption.

Skills

SAST

DAST

Dependency scanning

Vulnerability management tools

Cloud security

AWS

GCP

Kubernetes

Microservices

Leadership

Education

BA/BS in Computer Science or Cybersecurity

Tools

Snyk

GitHub Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Job description

The role requires 8+ years in security, deep knowledge of CVEs/OWASP Top 10, and hands-on experience with SAST/DAST and cloud-native security across AWS and GCP.

Get your free, confidential resume review.

or drag and drop your file here.