> Markdown version of [/jobs/ext/4630106-senior-staff-engineer-application-product-security](https://www.wearedevelopers.com/jobs/ext/4630106-senior-staff-engineer-application-product-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior/Staff Engineer, Application & Product Security

- **Company:** Grow Therapy
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, DevOps, Secure Coding, Software Security, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25197_0206e3cf45d9ba4fa8ea0bab9969e61f-2116593215

## About the Role

* You have 6+ years of experience in application or product security
 * You code well enough to automate tedious work and build frameworks or services that solve real security problems
 * You've been hands on with microservice architectures
 * You collaborate well, both within a security team and across the wider engineering org
 * You prioritize based on real risk, not just raw vulnerability counts
 * You've rolled up your sleeves and built a deep understanding of a codebase, rather than just talking about SAST, DAST, and SBOM tooling from the outside
 * You work well with product managers and service teams, not just engineers, and you genuinely care about the product and how it actually functions

## Description

* Champion a secure by default culture, building defense in depth into our frameworks, architecture, and everyday processes
 * Develop security requirements and work directly with teams to build them into new applications and services
 * Manually dig into our source code to build a real, working understanding of our products, not just a surface level view from tooling output
 * Drive the product security roadmap in collaboration with product, engineering, and the wider security team
 * Partner across product, engineering, DevOps, and services to ship secure software without slowing teams down
 * Design solutions that resolve and mitigate vulnerabilities and risk, and research the threats and attack methods most relevant to Grow
 * Run security risk assessments, hands on penetration testing, and threat modeling, and turn those findings into secure coding education for engineers