Senior/Staff Engineer, Application & Product Security

A senior or staff application and product security engineer at Grow Therapy, responsible for making secure choices the default for an engineering organisation of about 145 people, including on its growing AI and agent features. The engineer sets the product security roadmap, writes security requirements with teams, builds secure defaults and CI guardrails into the SDLC, reads source code by hand to understand the products, and runs threat models, risk assessments and penetration tests that feed secure coding training.

Grow wants six or more years in application or product security, enough coding ability to build security frameworks and automation, microservice experience and risk-based judgement. The role is fully remote or hybrid three days a week from New York, San Francisco or Seattle, with two or three trips a year.