Note: The job is a remote job and is open to candidates in USA. Grow Therapy is hiring a Senior/Staff Engineer, Application & Product Security to make secure engineering practices easy to adopt across its engineering organization. The role embeds secure defaults, CI guardrails, and threat modeling into the software development lifecycle, while leading product security work for applications and AI features.

Responsibilities

• Champion a secure by default culture, building defense in depth into our frameworks, architecture, and everyday processes
• Develop security requirements and work directly with teams to build them into new applications and services
• Manually dig into our source code to build a real, working understanding of our products, not just a surface level view from tooling output
• Drive the product security roadmap in collaboration with product, engineering, and the wider security team
• Partner across product, engineering, DevOps, and services to ship secure software without slowing teams down
• Design solutions that resolve and mitigate vulnerabilities and risk, and research the threats and attack methods most relevant to Grow
• Run security risk assessments, hands on penetration testing, and threat modeling, and turn those findings into secure coding education for engineers

Skills

• You have 6+ years of experience in application or product security
• You code well enough to automate tedious work and build frameworks or services that solve real security problems
• You've been hands on with microservice architectures
• You collaborate well, both within a security team and across the wider engineering org
• You prioritize based on real risk, not just raw vulnerability counts
• You've rolled up your sleeves and built a deep understanding of a codebase, rather than just talking about SAST, DAST, and SBOM tooling from the outside
• You work well with product managers and service teams, not just engineers, and you genuinely care about the product and how it actually functions

Benefits

• Hybrid or fully remote work arrangement; hybrid employees work onsite at the NYC, San Francisco, or Seattle hub three days per week (Tuesday, Wednesday, Thursday).
• Equity opportunities.
• Comprehensive medical, dental, vision, life, and disability coverage.
• No cost access to therapy through the Grow platform for US employees.
• Retirement savings programs.
• Flexible time off, company paid holidays (which vary by country), and a full company wide Winter Break.
• Up to 18 weeks of paid parental leave and a new child stipend.
• Dedicated weekly flexible time for self care.
• Annual stipend to support personal wellbeing and professional growth, including fitness, education, books, and learning resources.
• Pre tax commuter benefits for teammates working from a hub location.
• Support for your home workspace plus meal benefits, with offerings tailored to remote and hub based employees.
• Wellness memberships, virtual care, pet insurance discounts (where available), and global travel assistance.

Company Overview

Company H1B Sponsorship