Software Engineer, Glean
Application Security
$185-280k
Office located in Palo Alto, CA
Enterprise search and knowledge management
Open for applications
Enterprise search and knowledge management
201-500 employees
Open for applications
$185-280k
Office located in Palo Alto, CA
201-500 employees
Company mission
To bring people the knowledge they need to make a difference in the world.
Role
Who you are
- BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience)
- 5+ years of experience in application security and vulnerability management
- Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks
- Experience with SAST, DAST, dependency scanning, and vulnerability management tools (e.g., Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP)
- Strong familiarity with package managers (npm, pip, Maven, Go modules) and securing open-source dependencies
- Coding experience in languages such as Go, Python, Java, or C++ to develop security test cases and tooling
- Hands-on experience with cloud-native security best practices across AWS, GCP, or Azure
- Knowledge of container security, Kubernetes security, and securing microservices architectures
- Ability to lead cross-functional initiatives and drive security adoption within engineering teams
- A strong proactive approach to security, identifying risks before they become problems
- Excellent problem-solving skills and the ability to balance security with performance and usability
- Experience working in fast-paced, highly collaborative environments where security is a shared responsibility
- Passion for open-source security and keeping up with the latest trends in software vulnerability management
What the job involves
- Glean is looking for an experienced Application Security Engineer with a primary focus on ensuring that our entire technology stack is free of software vulnerabilities (CVEs)
- This role is responsible for securing our base OS images, ensuring all open-source software (OSS) dependencies are scanned and patched, and integrating cutting-edge security tools into our CI/CD pipeline
- The ideal candidate will drive the adoption of solutions like Google’s Assured Open Source Software (OSS) and explore alternative approaches to enhance software security
- This role will lead the vulnerability management charter at Glean, identifying, evaluating, and implementing new security technologies and processes to proactively protect our infrastructure
- Own and lead the vulnerability management lifecycle, ensuring our entire tech stack is free from known CVEs
- Implement and manage secure base OS images, ensuring all underlying systems remain hardened against security threats
- Continuously scan, monitor, and patch OSS dependencies to mitigate supply chain risks and enforce best practices for dependency management
- Research and evaluate trusted open-source security solutions like Google’s Assured Open Source Software and recommend their adoption where applicable
- Work closely with engineering teams to integrate state-of-the-art SAST, DAST, and dependency scanning tools into the CI/CD pipeline to detect and remediate vulnerabilities early
- Define and maintain best practices for secure coding to ensure all code developed by Glean engineers is free from vulnerabilities
- Develop automated security validation tests to enforce vulnerability-free deployments across the stack
- Lead the adoption and, if necessary, develop custom security solutions to manage and mitigate security risks at scale
- Provide security guidance, training, and mentorship to engineering teams to foster a security-first culture at Glean
Our take
Glean is an intuitive digital assistant which allows employees to search across all their apps and find the information and tools that they need more quickly.
With so many SaaS apps being used by modern day companies, overwhelm and inefficiency inevitably enter the equation. Glean’s search engine is proving popular for how it unifies and centralizes all these distributed tools and data.
It’s been quite a start to life at Glean, having only emerged from stealth in 2021, it received a $1 Billion valuation in early 2022, thus achieving unicorn status, and has received nearly $400 million in funding so far. The SaaS platform is already used by some major companies including Grammarly, databricks, and Rubrik.
That Glean was co-founded by a quartet with senior experience at Google, Microsoft, Uber, and Facebook stands the company in good stead. However, it’s the fact that its search engine is solving a new, but very real problem in the workplace that’s seen its popularity surge so quickly, which it’s likely to continue to do in the future. Its adaptability to include new AI capabilities to its platform, such as generative AI, has Glean well set to see further growth.
Steph
Company Specialist at Welcome to the Jungle
Insights
44% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Sep 2024
$260m
SERIES E
Feb 2024
$200m
SERIES D
Total funding: $655m
Company benefits
- Medical, dental, and vision for you and yours
- Competitive compensation and stock options
- 401k contribution
- Flexible work (3 days a week in the office), though we believe in folks working where they can be most effective
- Company events, from weekly happy hours to our annual company retreat
- Flexible hours, unlimited PTO, and company-wide winter break shutdown
- Transparent culture
- Learning and development stipend
- Free meals with lunch and dinner options every day
Company HQ
Evergreen Park, Palo Alto, CA
Leadership
Arvind Jain
(CEO)Former Engineer at Google and Microsoft. Is the co-founder of high growth startup Rubrik, which delivers data security and operational resilience for enterprises.
Piyush Prahladka
(Software Engineer)Prior to joining the co-founding team at Glean, they worked as a Senior Staff Software Engineer at Google, then as an Engineering Lead at Uber.
Tony Gentilcore
(Product Engineering Lead)Former Developer at At&T and TJC Labs. For ten years, served as a Senior Staff Software Engineer at Google, including a spell as Founder and Tech Lead / Manager of the Chrome Speed Team.
TR Vishwanath
(Engineering Lead)Before co-founding Glean, was a Principal Software Engineer at Facebook after spending eight years at Microsoft as a Software Design Engineer, then Principal Development Lead.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 50 more jobs at Glean