5 months ago
Bengaluru, IndiaSenior
Responsibilities
- Implement and improve the vulnerability-management lifecycle to eliminate known vulnerabilities and CVEs across the technology stack.
- Continuously scan, monitor, and patch open-source dependencies to mitigate supply-chain risks.
- Integrate SAST, DAST, dependency-scanning, and other security tools into the CI/CD pipeline.
- Define and maintain secure-coding best practices for engineering teams.
- Secure software designs, conduct secure code reviews, and perform penetration testing of features.
- Develop automated security-validation tests to enforce vulnerability-free deployments.
- Lead adoption of security solutions and develop custom tooling where necessary to manage risks at scale.
- Provide security guidance, training, and mentorship to engineering teams.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent industry experience.
- 5+ years of experience in application security and vulnerability management.
- Deep understanding of CVEs, the OWASP Top 10, supply-chain risks, authentication, authorization, RBAC, and database security.
- Experience with SAST, DAST, dependency scanning, and vulnerability management tools.
- Familiarity with npm, pip, Maven, and Go modules and with securing open-source dependencies.
- Coding experience in Go, Python, Java, or C++ for security test cases and tooling.
- Hands-on experience with cloud-native security practices across AWS, GCP, or Azure.
- Knowledge of container security, Kubernetes security, and securing microservices architectures.
- Ability to lead cross-functional initiatives and drive security adoption within engineering teams.
- Strong problem-solving skills and the ability to balance security with performance and usability.
- Experience in fast-paced, collaborative environments where security is a shared responsibility.
- Interest in open-source security and current software vulnerability-management trends.
Benefits
- Hybrid work arrangement with 3 days per week in the Bangalore office
- Potential eligibility for variable compensation, equity, and benefits
- Inclusive and diverse workplace
Tech Stack
About Glean
Glean.ai is Intelligent AP. We leverage untapped invoice data to surface relevant context, actionable insights, and savings recommendations that power great spend decisions.