Application Security Engineer

Glean is a Work AI platform that provides enterprise search, AI assistants, and scalable AI agents on a secure, open platform. The Application Security Engineer will lead vulnerability management across Glean’s technology stack, secure operating system images and open-source dependencies, integrate security validation into CI/CD pipelines, and drive secure-coding adoption.

Responsibilities:

• Own the vulnerability management lifecycle across Glean’s technology stack, from discovery and prioritization through remediation, reporting, and measurement
• Harden base OS images and secure open-source dependencies, package managers, and the broader software supply chain
• Integrate SAST, DAST, dependency scanning, and automated security validation into CI/CD pipelines
• Evaluate, adopt, and develop security solutions and tooling, including Google’s Assured OSS and comparable approaches
• Define secure-coding practices and drive engineering adoption through guidance, training, and mentorship

Requirements:

• BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience)
• 8+ years of experience in application security and vulnerability management
• Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks
• Experience with SAST, DAST, dependency scanning, and vulnerability management tools (e.g., Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP)
• Hands-on experience with cloud-native security across AWS, GCP, including containers, Kubernetes, and microservices
• Ability to lead cross-functional initiatives and drive security adoption across engineering teams
• Proactive, pragmatic, and collaborative, with strong problem-solving skills and the ability to balance security with performance and usability
• This role is remote