3 hours ago
Base Salary
$185k - $260k/yr
Responsibilities
- Own and lead the vulnerability management lifecycle to identify and remediate known CVEs across the technology stack.
- Implement and manage hardened secure base OS images.
- Continuously scan, monitor, and patch open-source software dependencies to mitigate supply chain risks.
- Research and evaluate open-source security solutions, including Google’s Assured Open Source Software.
- Integrate SAST, DAST, dependency scanning, and other security tools into CI/CD pipelines.
- Define secure coding best practices and develop automated security validation tests.
- Lead or develop security solutions that manage and mitigate risks at scale.
- Provide security guidance, training, and mentorship to engineering teams.
Requirements
- BA/BS in Computer Science, Cybersecurity, or a related field, or equivalent industry experience.
- 5+ years of experience in application security and vulnerability management.
- Deep understanding of CVEs, the OWASP Top 10, software vulnerabilities, and software supply chain risks.
- Experience with SAST, DAST, dependency scanning, and vulnerability management tools such as Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, and OWASP ZAP.
- Strong familiarity with npm, pip, Maven, and Go modules and with securing open-source dependencies.
- Coding experience with Go, Python, Java, or C++.
- Hands-on experience with cloud-native security practices across AWS, GCP, or Azure.
- Knowledge of container security, Kubernetes security, and securing microservices architectures.
- Ability to lead cross-functional initiatives and drive security adoption within engineering teams.
- Strong proactive security, problem-solving, collaboration, and communication skills, with the ability to balance security, performance, and usability.
- Passion for open-source security and current software vulnerability management trends.
Benefits
- Remote work arrangement.
- Medical, vision, and dental coverage.
- Generous time-off policy.
- 401k contribution plan.
- Home office improvement stipend.
- Annual education and wellness stipends.
- Regular company events and healthy lunches daily.
- Potential eligibility for variable compensation, equity, and benefits.
Tech Stack
Categories
About Glean
Glean.ai is Intelligent AP. We leverage untapped invoice data to surface relevant context, actionable insights, and savings recommendations that power great spend decisions.