Glean · 4 months ago
Software Engineer, Application Security
Glean is an innovative AI-powered knowledge management platform founded in 2019, focused on enhancing productivity and collaboration within organizations. They are seeking an experienced Application Security Engineer to lead the vulnerability management lifecycle, ensuring the technology stack is secure from software vulnerabilities and integrating security tools into the CI/CD pipeline.
Agentic AIArtificial Intelligence (AI)Enterprise SoftwareGenerative AIMachine LearningSearch Engine
Responsibilities
Own and lead the vulnerability management lifecycle, ensuring our entire tech stack is free from known CVEs
Implement and manage secure base OS images, ensuring all underlying systems remain hardened against security threats
Continuously scan, monitor, and patch OSS dependencies to mitigate supply chain risks and enforce best practices for dependency management
Research and evaluate trusted open-source security solutions like Google’s Assured Open Source Software and recommend their adoption where applicable
Work closely with engineering teams to integrate state-of-the-art SAST, DAST, and dependency scanning tools into the CI/CD pipeline to detect and remediate vulnerabilities early
Define and maintain best practices for secure coding to ensure all code developed by Glean engineers is free from vulnerabilities
Develop automated security validation tests to enforce vulnerability-free deployments across the stack
Lead the adoption and, if necessary, develop custom security solutions to manage and mitigate security risks at scale
Provide security guidance, training, and mentorship to engineering teams to foster a security-first culture at Glean
Qualification
Required
BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience)
5+ years of experience in application security and vulnerability management
Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks
Experience with SAST, DAST, dependency scanning, and vulnerability management tools (e.g., Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP)
Strong familiarity with package managers (npm, pip, Maven, Go modules) and securing open-source dependencies
Coding experience in languages such as Go, Python, Java, or C++ to develop security test cases and tooling
Hands-on experience with cloud-native security best practices across AWS, GCP, or Azure
Knowledge of container security, Kubernetes security, and securing microservices architectures
Ability to lead cross-functional initiatives and drive security adoption within engineering teams
A strong proactive approach to security, identifying risks before they become problems
Excellent problem-solving skills and the ability to balance security with performance and usability
Experience working in fast-paced, highly collaborative environments where security is a shared responsibility
Passion for open-source security and keeping up with the latest trends in software vulnerability management
Benefits
Competitive compensation
Medical, Vision and Dental coverage
Flexible work environment and time-off policy
401k
Company events
A home office improvement stipend when you first join
Annual education stipend
Wellness stipend
Healthy lunches and dinners provided daily
Company
Glean
Glean develops an AI-based search engine software that connects enterprise data and generates answers to improve workplace efficiency.
H1B Sponsorship
Glean has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (22)
2024 (17)
2023 (7)
2022 (26)
Funding
Current Stage
Late StageTotal Funding
$768.2MKey Investors
Wellington ManagementSequoia CapitalGeneral Catalyst
2025-06-10Series F· $150M
2024-09-10Series E· $260M
2024-02-27Series D· $203.2M
Recent News
Business Insider
2025-12-24
2025-12-11
Company data provided by crunchbase