Security Engineer

We want to build agents that autonomously validate code changes. Today that looks like AI that reviews pull requests in GitHub, catching bugs and enforcing standards.Greptile reviews 5B lines of code every month for 22,000+ customers.Problems We’re Excited AboutCoding standards can be idiosyncratic and are often poorly documented; can we build agents that learn them through osmosis like a new hire might?Can we identify for each customer what types of PR feedback they do and don’t care about in order to increase signal-to-noise ratio?Some bugs are best caught by running the code. Can we autonomously deploy feature branches and use agents to try to break the application?How do we secure a product that processes highly sensitive code across cloud, self-hosted, and air-gapped environments?Trajectory22,000+ customers5B lines of code reviewed every monthScaled from $0 to eight figures in ARRRaised $30M from Benchmark, Y Combinator, Paul Graham, and InitializedTeamWe have assembled a small, talent dense team who have scaled critical functions at companies like Stripe, Google, Figma, etc. ResponsibilitiesOwn Greptile’s security posture across the product, infrastructure, and internal systemsConsult on risky code changes and critical architecture decisionsFix pentest findings and patch reported vulnerabilitiesManage our bug bounty program and coordinate vulnerability responseDesign, implement, test, and deploy secure product and infrastructure improvementsWork directly with engineers to make security part of how we build, rather than a final review stepQualificationsB.S. Computer Science or equivalent degree, undergraduate or higher3+ years of software engineering, DevOps, or security engineering experienceExperience with JavaScript/TypeScriptDeep knowledge of application, infrastructure, and cloud securityExperience working on security-critical products and complex architecturesStrong judgment when evaluating vulnerabilities, technical tradeoffs, and riskYou will like this role ifYou want to work on a product that thousands of developers rely onYou want real ownership over the security of a fast-growing technical productThe chaos of high growth and things breaking is exciting to youYou like being in an office every day around other smart people who are excited about what they’re buildingYou love solving very hard problems. You specifically prefer working in-person over working remoteCompensation Range: $170K - $300K