Glean is looking for an experienced Application Security Engineer with a primary focus on ensuring that our entire technology stack is free of software vulnerabilities (CVEs).
Own the vulnerability management lifecycle across Glean’s technology stack, from discovery and prioritization through remediation, reporting, and measurement.
Harden base OS images and secure open-source dependencies, package managers, and the broader software supply chain.
Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines.
Evaluate, adopt, and develop security solutions and tooling, including Google’s Assured OSS and comparable approaches.
BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience).
Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks.
Experience with SAST, DAST, dependency scanning, and vulnerability management tools (e.g., Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP).
Hands-on experience with cloud-native security across AWS, GCP, including containers, Kubernetes, and microservices.
Experience: Senior-level · 8+ years
More open roles like this one
Bengaluru, KA, IndiaIndia & South Asia
Canberra, AUST CAPITAL TERR, AustraliaAsia-Pacific
Sydney, NSW, AustraliaAsia-Pacific
Application Security Engineer · Glean
Don't have an account? Already have an account?