Remote Senior App Security Engineer — Vulnerability Mgmt

gleanwork; United States; Remote; USD 185,000 - 260,000; Full time

Benefits offered by this job

Home office stipend

Education stipend

Wellness stipend

401k plan

Daily lunches

Job summary

Glean is seeking an experienced Application Security Engineer to own the vulnerability management lifecycle, harden base OS images, secure OSS dependencies, and integrate SAST/DAST into CI/CD pipelines.

The role is remote in the United States, offering a comprehensive compensation package between $185k and $260k per year, plus benefits, stipends, and opportunities to advance security across cloud-native environments (AWS, GCP, Kubernetes).

Qualifications

• BA/BS in Computer Science, Cybersecurity, or related field.
• 8+ years of application security and vulnerability management experience.
• Deep understanding of CVEs, OWASP Top 10, and supply chain risks.
• Experience with SAST, DAST, dependency scanning, and vulnerability-management tools.
• Hands-on security across AWS and GCP, including containers and Kubernetes.

Responsibilities

• Own the vulnerability management lifecycle from discovery to remediation.
• Harden base OS images and secure OSS dependencies and package managers.
• Integrate SAST, DAST, dependency scanning into CI/CD pipelines.
• Evaluate and develop security tooling, including Google's Assured OSS.
• Define secure-coding practices and drive adoption across engineering teams.

Skills

Vulnerability management

SAST

DAST

Dependency scanning

Security tooling

CI/CD security

Google Assured OSS

Cloud security (AWS)

Cloud security (GCP)

Kubernetes

Education

BA/BS in Computer Science or Cybersecurity

Tools

Snyk

GitHub Dependabot

Trivy

Clair

Burp Suite

OWASP ZAP

Job description

Glean is seeking an experienced Application Security Engineer to own the vulnerability management lifecycle, harden base OS images, secure OSS dependencies, and integrate SAST/DAST into CI/CD pipelines.

The role is remote in the United States, offering a comprehensive compensation package between $185k and $260k per year, plus benefits, stipends, and opportunities to advance security across cloud-native environments (AWS, GCP, Kubernetes).