Platform Security Engineer

Overview

Glean is seeking a security-focused software engineer to design, build and maintain the security foundation of its platform, working across authentication, authorization, service communication and data access.

What you'll do

• Design, develop, and maintain secure software for core platform functionalities, particularly authentication and authorization systems
• Design, develop, and maintain secure software for secure communication channels between services (e.g., API security)
• Design, develop, and maintain secure software for secure data storage and access controls
• Collaborate with cross-functional teams (engineering, product) to integrate security best practices throughout the development lifecycle
• Stay up-to-date on the latest security threats, vulnerabilities, and mitigation strategies
• Conduct security code reviews and identify potential security risks in existing codebases
• Develop and implement automated security testing procedures
• Respond to security incidents and participate in incident response procedures
• Continuously improve the platform's security posture by identifying and implementing security enhancements
• Document security processes, procedures, and best practices

What you'll need

• BA/BS in computer science, or related degree
• Minimum 5+ years of experience in software development with a strong focus on security aspects
• Proven experience in designing and implementing secure authentication and authorization systems
• In-depth understanding of secure coding principles and best practices (e.g., OWASP Top 10)
• Experience with secure communication protocols (e.g., TLS/SSL)
• Familiarity with security testing tools and methodologies (e.g., static code analysis, penetration testing)
• Excellent problem-solving and analytical skills
• Strong communication and collaboration skills
• Ability to work independently and as part of a cross-functional team
• Passion for security and a commitment to building secure and reliable systems
• Thrive in a customer-focused, tight-knit and cross-functional environment, being a team player and willing to take on whatever is most impactful for the company
• A proactive and positive attitude to lead, learn, troubleshoot and take ownership of both small tasks and large features
• An interest/desire to learn and own various aspects of security
• Strong coding skills (for example in Go/Python/Java/C++ etc) with an emphasis on designing for reliability and scale, and writing well-tested components

Nice to have

• MS degree in computer science or related field
• Experience with cloud security principles and tools (AWS Security, GCP Security)
• Experience with container security (Docker Security, Kubernetes Security)

Details

• Location: Remote (US)
• Standard base salary range: $185,000 - $260,000 annually, determined by location, level, job-related knowledge, skills, and experience
• Certain roles may be eligible for variable compensation, equity, and benefits