← All roles

Supply Chain Security Engineer

Glean· Engineering
Apply on company site
Hybrid (Bangalore, India)Posted 11mo ago

About the role

Glean is seeking a Supply Chain Security Engineer focused on ensuring the security of the entire technology stack by managing vulnerabilities, securing OSS dependencies, and integrating security tooling into CI/CD pipelines.

Responsibilities

  • Implement and improve the vulnerability management lifecycle, ensuring our entire tech stack is free from known vulnerabilities/CVEs.
  • Continuously scan, monitor, and patch OSS dependencies to mitigate supply chain risks and enforce best practices for dependency management by integrating artifact scanning processes in CI/CD.
  • Help build and execute our software supply chain security strategy to expand upon Glean’s ability to deploy secure-by-default open-source artifacts across the enterprise.
  • Improve the supply chain vulnerability scoring mechanism to take into account environmental/impact controls and reachability factors.
  • Research ways to reduce the supply chain vulnerability footprint across Python, Java, GO, npm ecosystems and base layers.
  • Create hardened images which can be used across multiple deployment stacks.
  • Lead and contribute to Software Supply Chain Security initiatives, including SBOM generation and consumption, vulnerability prioritisation, automated fix pipeline, build provenance, artifact signing, signature verification, and trusted release workflows.
  • Design automation and policy-driven controls that help teams prove what was built, where it came from, and whether it can be trusted before deployment.
  • Develop and manage secure software supply chain usage guidelines and documentation.
  • Get Glean FEDRAMP ready with respect to vulnerability management.

Qualifications

  • BA/BS in Computer Science, Cybersecurity, or a related field (or equivalent industry experience).
  • 3+ years of experience in application security and vulnerability management.
  • Deep understanding of software security vulnerabilities, including CVEs, OWASP Top 10, and supply chain risks.
  • Deep understanding of security design principles including authentication, authorisation, RBAC, and database security.
  • Strong understanding of software supply chain components and management.
  • Strong understanding of software supply chain security threats and vulnerabilities.
  • Strong familiarity with package managers (npm, pip, Maven, Go modules) and securing open-source dependencies.
  • Coding experience in Go, Python, Java, or C++ to develop security test cases and tooling.
  • Hands-on experience with cloud-native security best practices across AWS, GCP, or Azure.
  • Experience with handling FEDRAMP audit cycles for vulnerability management.
  • Knowledge of container security, Kubernetes security, and securing microservices architectures.
  • Ability to lead cross-functional initiatives and drive security adoption within engineering teams.
  • Proactive security mindset with ability to identify risks before they become problems.
  • Excellent problem-solving skills and the ability to balance security with performance and usability.
  • Experience working in fast-paced, highly collaborative environments where security is a shared responsibility.
  • Passion for open-source security and keeping up with the latest trends in software vulnerability management.

Skills

Required:Vulnerability management
Last updated Oct 14, 2026. Interested? Apply on the company site.

About Glean

Work AI that Works | Agents, Assistant & Search

Glean is the Work AI platform connected to your enterprise's data. Find, create, and automate anything. Explore what Work AI can do for you!

AIAgentsAssistantEnterprise DataSearchWork AI Platformai-agents-and-applicationsliquid-ai-recruiting-target
Company profileWebsite

More open roles at Glean