Security Engineer

Hey! We're team Granola 👋 If you haven't already, you should check out what we're building , and why you should work here . In this role, you will be responsible for identifying and mitigating security vulnerabilities within Granola's applications, building security tools, and working closely with our development teams to integrate security throughout our software development lifecycle. You'll help establish a robust security culture as we unlock Granola for the next 100x users. In this role, you will: Design and implement security features within the Granola app to protect user data and strengthen the product's security posture Leverage AI-assisted tooling to conduct security assessments, code reviews, threat modeling and penetration testing to identify vulnerabilities in our applications Work closely with development teams to ensure secure coding practices are integrated throughout the SDLC Track, analyse, and manage application vulnerabilities, using AI-assisted triage and prioritisation to guide remediation efforts Support incident response by investigating application-related security incidents Stay current on the latest security threats, vulnerabilities, and technologies to enhance our security posture Your background looks something like: Extensive experience building production software, with hands-on exposure to security-sensitive work (auth, data handling, API design, encryption or similar) and a genuine interest in going deeper into application security Comfortable with secure coding practices and at least one of: threat modelling, risk assessments, or incident response, with appetite to grow across the rest Proficiency in programming languages such as TypeScript, Python, or similar Experience with cloud and cloud security (we use AWS) Strong communication skills with the ability to explain complex security issues to both technical and non-technical audiences As a person, you… Are first and foremost a builder who thinks like an attacker Are excited to wor