← All roles

Product Engineer, Security

Apply on company site
Hybrid (San Francisco)$170k - $300kFull-timePosted 5d ago

About the role

Greptile is an AI code reviewer with complete context of your codebase. They are looking for a Product Engineer with strong security expertise to build Greptile’s security product from the ground up, working on agents and infrastructure to find, validate, reproduce, and fix vulnerabilities for thousands of engineering teams.

Responsibilities

  • Build Greptile’s security product from the ground up, including codebase scanning, a security-focused PR bot, continuous pentesting, and tools for code analysis, security testing, and vulnerability reproduction.
  • Improve how agents understand codebases, identify and investigate potential vulnerabilities, reproduce them, and give developers and coding agents the information they need to fix them.
  • Build testing and validation infrastructure where agents can detect and reproduce suspected vulnerabilities and verify fixes.
  • Integrate security findings into pull requests, CI pipelines, and existing engineering workflows.
  • Design, implement, test, and deploy full features. Talk to developers and security teams, iterate on their feedback, and improve reliability and performance across different types of codebases.

Qualifications

  • B.S. Computer Science or equivalent degree, undergraduate or higher
  • 1+ years of software or DevOps engineering experience
  • Experience with JavaScript/TypeScript
  • Security engineering or research experience through source-code auditing, offensive security work, application security engineering, original bug bounty findings, or strong CTF performance
  • Experience building security products or LLM-powered tools and agents is a strong plus

Skills

Required:Bachelor’s degree in Computer Science or equivalentSoftware or DevOps engineering experienceJavaScript/TypeScriptSecurity engineering / research experience
Nice to have:Experience building security products or LLMon-powered tools
Last updated Oct 21, 2026. Interested? Apply on the company site.
Greptile logo

About Greptile

AI code reviewer with complete context of your codebase

Greptile reviews pull requests with full context of the codebase. Top YC companies like PostHog, Raycast, Vouch, Podium, and YC's own internal software team use Greptile to review millions of changes every week. When companies start using Greptile, they catch more bugs and merge PRs 4x faster, on average Greptile can be used via the cloud, or be hosted 100% on your cloud in an air-gapped VPC.

artificial-intelligencedeveloper-toolsai

More open roles at Greptile