Security Engineer
Own the security posture of a fast-growing developer product across application, infrastructure, cloud, and internal systems. The role requires at least three years of relevant engineering or security experience, strong vulnerability judgment, and hands-on JavaScript or TypeScript expertise.
About the job
Responsibilities
- Own Greptile’s security posture across the product, infrastructure, and internal systems.
- Consult on risky code changes and critical architecture decisions.
- Fix penetration-test findings and patch reported vulnerabilities.
- Manage the bug bounty program and coordinate vulnerability response.
- Design, implement, test, and deploy secure product and infrastructure improvements.
- Work directly with engineers to integrate security throughout the development process.
Requirements
- Bachelor of Science in Computer Science or an equivalent undergraduate degree or higher.
- 3+ years of experience in software engineering, DevOps, or security engineering.
- Experience with JavaScript or TypeScript.
- Deep knowledge of application, infrastructure, and cloud security.
- Experience working on security-critical products and complex architectures.
- Strong judgment when evaluating vulnerabilities, technical tradeoffs, and risk.
Skills
Application Security, Infrastructure Security, Cloud Security, JavaScript, TypeScript, Vulnerability Management, Bug Bounty Programs, DevOps
Similar jobs
Security Engineering jobs
Zoox
Foster City, CA
Develops safety requirements, analyses, and fail-operational architectures for autonomous-vehicle sensing and perception systems. The role requires 3+ years analyzing safety-critical systems and familiarity with functional-safety standards, sensing hardware, perception, and cross-functional systems engineering.
Vanta
Remote
Leads a global Security Operations team, setting detection, response, and security strategy while driving incident response and risk remediation. The role requires strong SaaS and cloud security experience, leadership ability, familiarity with major security standards, and responsible use of AI.
Vannevar
United States
The Application Security Engineer will embed security practices throughout the SaaS software development lifecycle, including threat modeling, automated testing, vulnerability remediation, and incident response. The role requires 5+ years of application or product security experience and expertise with DevSecOps workflows, web applications, and CI/CD automation.
Onebrief
United States
Own and strengthen Onebrief’s corporate security stack across endpoints, identity, SaaS, Zero Trust, and monitoring. The role emphasizes security automation, configuration-baseline enforcement, telemetry integration, and continuously validated compliance controls.
Wiz
Washington, DC
The Cyber Threat Intel Analyst tracks, investigates, attributes, and reports on advanced threats targeting cloud, AI, and developer environments. The role requires at least three years of security or threat research experience and strong technical analysis and writing skills.