Senior Staff Security Engineer - Product & Applications

Transformcap; San Francisco (CA); Hybrid; USD 182,000 - 288,000; Full time

Benefits offered by this job

Health Benefits

Grow for Grow

Financial Wellness

Flexible Time Off, Holidays & Winter

Parental Leave

Mental Health Mornings/Afternoons

Wellness & Development Stipend

Commuter Benefits

Home Office & Meals

Additional Perks

Job summary

Grow Therapy is on a mission to empower therapists and patients through secure software. As a Senior Security Engineer, you will embed security into the SDLC for ~145 engineers, shaping defense-in-depth across products, AI features, and infrastructure.

You will lead security requirements, perform risk assessments and threat modeling, and collaborate with product, engineering, and DevOps to ship secure software without slowing teams.

Qualifications

• 6+ years of experience in application or product security.
• Hands-on with microservice architectures.
• Ability to automate repetitive work and build frameworks.
• Collaborate with product managers and engineers across teams.
• Experience with SAST/DAST/SBOM tooling and secure coding practices.

Responsibilities

• Champion a secure-by-default culture with defense-in-depth across frameworks and processes.
• Develop security requirements and integrate them into new applications and services.
• Dig into source code to gain deep product understanding, beyond tooling output.
• Drive the product security roadmap with product, engineering, and security teams.
• Partner across product, engineering, DevOps, and services to ship secure software without slowing teams.
• Design solutions to resolve vulnerabilities, research threats, and educate engineers on secure coding.
• Run security risk assessments, penetration testing, and threat modeling.

Skills

Application security

Automation

Microservices

Threat modeling

Penetration testing

Team collaboration

Tools

SAST

DAST

SBOM tooling

Job description

Grow Therapy is on a mission to empower therapists and patients through secure software. As a Senior Security Engineer, you will embed security into the SDLC for ~145 engineers, shaping defense-in-depth across products, AI features, and infrastructure.

You will lead security requirements, perform risk assessments and threat modeling, and collaborate with product, engineering, and DevOps to ship secure software without slowing teams.