# Security Engineer

**Company:** [Granola](https://hotfix.jobs/companies/granola)
**Location:** London, United Kingdom
**Role:** Security Engineering
**Skills:** Application Security, TypeScript, Python, AWS, Cloud Security, Secure Coding, Threat Modeling, Risk Assessments, Incident Response, Penetration Testing, Code Review, Encryption
**Posted:** 2026-05-12

> Builds application security features, assesses and remediates vulnerabilities, and embeds secure development practices across the SDLC. The role requires production software experience, proficiency in TypeScript or Python, AWS and cloud-security familiarity, and strong communication skills.

## Job Description

## Responsibilities
- Design and implement security features within the Granola app to protect user data and strengthen the product's security posture.
- Use AI-assisted tooling for security assessments, code reviews, threat modeling, and penetration testing to identify application vulnerabilities.
- Partner with development teams to integrate secure coding practices throughout the software development lifecycle.
- Track, analyze, and manage application vulnerabilities, using AI-assisted triage and prioritization to guide remediation.
- Support incident response by investigating application-related security incidents.
- Stay current on security threats, vulnerabilities, and technologies.

## Requirements
- Extensive experience building production software, including hands-on work with security-sensitive areas such as authentication, data handling, API design, or encryption.
- Genuine interest in application security and willingness to deepen security expertise.
- Familiarity with secure coding practices and at least one of threat modeling, risk assessments, or incident response.
- Proficiency in TypeScript, Python, or a similar programming language.
- Experience with cloud platforms and cloud security, particularly AWS.
- Strong communication skills, including the ability to explain complex security issues to technical and non-technical audiences.
- Willingness to work in person from the London office most of the time.
- Interest in working in a fast-paced startup environment.

## Compensation and Benefits
- Salary paid slightly above market, with above-market equity.
- Relocation assistance for candidates moving to London.
- In-person work five days per week at the Old Street office.

## Similar jobs

- [Security Engineer, Application Security](https://hotfix.jobs/jobs/8c8a3f77-9f1b-45b4-b825-819dd30e2fb0) - Writer - London, United Kingdom
- [Platform Security Engineer](https://hotfix.jobs/jobs/e556dd76-0f95-4dfa-9d3d-e476f24057c0) - Supabase - Remote
- [Software Engineer, Trust & Safety](https://hotfix.jobs/jobs/ccbdc9a4-a902-479b-845f-0d13a50d97a0) - Vercel - San Francisco, CA - $196k – $294k/yr
- [Security Engineer, Incident Response](https://hotfix.jobs/jobs/83eb71b2-95d7-4319-85af-294442d49213) - Twilio - Remote
- [Manager, Security Operations](https://hotfix.jobs/jobs/0a4637da-6072-4ec3-a0a9-8b6d4a412d45) - Vanta - Remote - $178k – $209k/yr

**Apply:** https://hotfix.jobs/jobs/7b2e6b56-3d9c-4bab-b893-961e538a4b07
**Canonical:** https://hotfix.jobs/jobs/7b2e6b56-3d9c-4bab-b893-961e538a4b07