Senior Security Engineer, App & Product - Secure by Default

Grow Therapy; Seattle, New York, San Francisco (WA, NY, CA); Hybrid; USD 182,000 - 288,000; Full time

Benefits offered by this job

Health Benefits

Grow for Grow

Financial Wellness

Flexible Time Off, Holidays & Winter

Parental Leave

Mental Health Mornings/Afternoons

Wellness Stipend

Commuter Benefits

Home Office & Meals

Additional Perks

Job summary

Grow Therapy is seeking a Security Engineer to champion a secure-by-default culture across a ~145-engineer organization, embedding secure defaults, threat modeling, and secure SDLC practices into product development.

You will dig into codebases, define security requirements, drive the security roadmap with product and engineering, and build scalable defenses across microservices while enabling rapid delivery of AI and agent features.

Qualifications

• 6+ years of experience in application or product security.
• You code well enough to automate tedious work and build frameworks or services that solve real security problems.
• You’ve been hands on with microservice architectures.
• You collaborate well, both within a security team and across the wider engineering org.
• You prioritise based on real risk, not just raw vulnerability counts.
• You’ve rolled up your sleeves and built a deep understanding of a codebase, rather than just talking about SAST, DAST, and SBOM tooling from the outside.
• You work well with product managers and service teams, not just engineers, and you genuinely care about the product and how it actually functions.

Responsibilities

• Champion a secure by default culture, building defense in depth into our frameworks, architecture, and everyday processes.
• Develop security requirements and work directly with teams to build them into new applications and services.
• Manually dig into our source code to build a real, working understanding of our products, not just a surface level view from tooling output.
• Drive the product security roadmap in collaboration with product, engineering, and the wider security team.
• Partner across product, engineering, DevOps, and services to ship secure software without slowing teams down.
• Design solutions that resolve and mitigate vulnerabilities and risk, and research the threats and attack methods most relevant to Grow
• Run security risk assessments, hands on penetration testing, and threat modeling, and turn those findings into secure coding education for engineers

Skills

Security experience

Automation coding

Microservices

Collaborative

Risk-based prioritization

Codebase understanding

Job description

Grow Therapy is seeking a Security Engineer to champion a secure-by-default culture across a ~145-engineer organization, embedding secure defaults, threat modeling, and secure SDLC practices into product development.

You will dig into codebases, define security requirements, drive the security roadmap with product and engineering, and build scalable defenses across microservices while enabling rapid delivery of AI and agent features.