Senior Application Security Engineer
M&T BankSalary not specified
Full Time
Senior (5 to 8 years), Expert & Leadership (9+ years)
Not SpecifiedCompensation
Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level
Full TimeJob Type
UnknownVisa
TechnologyIndustries
Requirements
- BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent experience)
Responsibilities
- Own and lead the vulnerability management lifecycle, ensuring the entire tech stack is free from known CVEs
- Implement and manage secure base OS images, ensuring all underlying systems remain hardened against security threats
- Continuously scan, monitor, and patch OSS dependencies to mitigate supply chain risks and enforce best practices for dependency management
- Research and evaluate trusted open-source security solutions like Google’s Assured Open Source Software and recommend their adoption where applicable
- Work closely with engineering teams to integrate state-of-the-art SAST, DAST, and dependency scanning tools into the CI/CD pipeline to detect and remediate vulnerabilities early
- Define and maintain best practices for secure coding to ensure all code developed by Glean engineers is free from vulnerabilities
- Develop automated security validation tests to enforce vulnerability-free deployments across the stack
- Lead the adoption and, if necessary, develop custom security solutions to manage and mitigate security risks at scale
- Provide security guidance, training, and mentorship to engineering teams to foster a security-first culture at Glean
Skills
Key technologies and capabilities for this role
Questions & Answers
Common questions about this position
Is this position remote?
Yes, this is a remote position.
What is the salary for this role?
This information is not specified in the job description.
What skills and experience are required for this Application Security Engineer role?
The role requires experience in vulnerability management, securing OS images, managing OSS dependencies, integrating SAST/DAST tools into CI/CD pipelines, and providing security guidance to engineering teams. A BA/BS in Computer Science, Cybersecurity, or related field (or equivalent experience) is needed.
What is the company culture like at Glean?
Glean fosters a security-first culture through guidance, training, and mentorship provided to engineering teams.
What makes a strong candidate for this role?
A strong candidate has a BA/BS in Computer Science, Cybersecurity, or related field (or equivalent), and experience leading vulnerability management, securing systems, managing dependencies, and integrating security into CI/CD while mentoring teams.
Glean
AI-powered search tool for workplace productivity
About Glean
Glean enhances workplace productivity by providing an AI-powered search tool that works across all applications within a company. This tool utilizes deep learning-based Language Models to understand natural language queries, allowing users to find information more easily. It continuously learns from the specific language and context of a company, improving the relevance of search results without manual adjustments. Additionally, Glean offers a chat assistant that can analyze and summarize information from various company documents and conversations, further increasing efficiency. Unlike many competitors, Glean's focus on natural language processing and its ability to adapt to a company's unique context set it apart. The goal of Glean is to streamline information retrieval in the workplace, making it accessible and efficient for all types of organizations, from startups to large enterprises.
Palo Alto, CaliforniaHeadquarters
2019Year Founded
$637.1MTotal Funding
SERIES_ECompany Stage
Enterprise Software, AI & Machine LearningIndustries
501-1,000Employees
Benefits
Healthcare - Happy and healthy go together. We cover medical, dental, and vision for you and yours.
Competitive compensation - Have a real stake in your job and your future with competitive stock options.
401(k) - We make it easy to save for the future today by contributing to a 401k.
Flexible work - We work 3 days a week in the office, though we believe in folks working where they can be most effective.
Company events - We work hard and play hard - from weekly happy hours to our annual company retreat.
Unlimited PTO - Flexible hours, PTO, company-wide summer and winter break shutdown
Transparent culture - By default we keep things open and accessible so we can make better decisions together, faster.
Learning and development - We offer a learning stipend to help you grow and achieve your goals.
Free meals - With lunch and dinner options every day, no need to work while you’re hungry.
Risks
Inflated valuations in AI could lead to financial instability for Glean.
Competition from tech giants like Microsoft and Amazon pressures Glean's market share.
Opening a new office in Bengaluru may strain resources and impact operational efficiency.
Differentiation
Glean uses AI to enhance workplace productivity with a unique search tool.
The platform integrates with enterprise data, providing personalized, context-aware search results.
Glean's AI assistant offers analyses and summaries, reducing time spent on information retrieval.
Upsides
Glean's $260M funding round doubled its valuation to $4.6 billion in 2023.
The rise of hybrid work models increases demand for Glean's seamless information retrieval tools.
Growing data privacy emphasis allows Glean to offer robust, compliant data hosting options.
Related Jobs
RemoteRemoteSoftware Engineer, Security
Render$193,000 - $265,000/year
- Full Time
- Senior (5 to 8 years), Expert & Leadership (9+ years)
RemotePrincipal DevSecOps Engineer
Second Front SystemsSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteSecurity Engineer
Stitch FixSalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteSr. Vulnerability Management Engineer (Remote)
CrowdstrikeSalary not specified
RemoteSoftware Engineer, CI/CD
VercelSalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteSecurity Engineer, Cloud Security
Red Cell PartnersSalary not specified
- Full Time
- Senior (5 to 8 years), Expert & Leadership (9+ years)
RemoteSecurity Engineer, Product Security
Chainlink LabsSalary not specified
- Full Time
- Mid-level (3 to 4 years), Senior (5 to 8 years)
RemoteSenior Engineer, App Security
HealthieSalary not specified
- Full Time
- Senior (5 to 8 years), Expert & Leadership (9+ years)
RemoteSoftware Development Engineer in Test IV
OpenXSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteSoftware Engineer, Mobile Apps
SmithRxSalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteDetection & Response Engineer III - NG-SIEM (Remote)
CrowdstrikeSalary not specified