Senior/Staff Engineer, Application & Product Security

Remote. Posted 2 months ago

The role

You will bake secure defaults, CI guardrails, and threat modeling into the SDLC for an engineering organization of roughly 145 engineers. This includes securing fast growing AI and agent features.

What you will do

Champion a secure by default culture
Develop security requirements and work with teams to build them into applications and services
Manually dig into source code to build understanding of products
Drive the product security roadmap in collaboration with product, engineering, and security teams
Partner across product, engineering, DevOps, and services to ship secure software
Design solutions to resolve and mitigate vulnerabilities and risk
Research threats and attack methods relevant to Grow
Run security risk assessments, penetration testing, and threat modeling
Turn findings into secure coding education for engineers

Required qualifications

6+ years of experience in application or product security
Ability to code to automate work and build frameworks or services
Hands on experience with microservice architectures
Ability to collaborate within a security team and across the wider engineering org
Ability to prioritize based on real risk
Ability to build a deep understanding of a codebase

Nice to have

Work well with product managers and service teams

Benefits

Comprehensive medical, dental, vision, life, and disability coverage
No cost access to therapy through the Grow platform (available to US employees)
Retirement savings programs
Equity opportunities
Flexible time off
Paid holidays
Winter Break
Up to 18 weeks of paid parental leave
New child stipend
Weekly flexible time for self care
Annual wellness & development stipend
Pre tax commuter benefits

About the company

Grow is a three-sided marketplace that empowers providers, augments insurance payors, and serves patients to make mental health care more effective and accessible. The company has received more than $328M in funding.